What to do if…
your laptop is stolen and it contains sensitive personal documents
Short answer
Use another trusted device to lock or erase the laptop if you can, then secure your email account first. Email is often the account used to reset passwords elsewhere.
Do not do these things
- Don’t sign in from a random shared computer, such as a hotel lobby or internet café, unless there is no safer option.
- Don’t assume a login password alone means everything is safe; focus on accounts that were already signed in and files stored on the laptop.
- Don’t post public details about the theft, exact location, tracking screenshots, serial number, or recovery attempts.
- Don’t reply to anyone who claims they found it and asks you to unlock it, read out codes, or click links.
- Don’t spend the first stretch on replacement shopping, insurance forms, or every old password; deal with email, money, cloud storage, and work access first.
What to do now
-
Get to a safer pause and write down the basics.
Note the time last seen, place last seen, whether it was a work or personal laptop, and anything that identifies it, such as make, model, device name, or serial number. Check purchase emails or your device account if you do not have the serial number to hand. -
Lock it, mark it as lost, or remotely erase it if that was already set up.
Use the service linked to the laptop, such as Apple Find My, Microsoft Find My Device, Google account device controls, or your work IT portal. If erase is offered, it may only complete when the laptop next connects to the internet, so also remove account access where you can. -
Secure your email account first.
From a trusted phone or computer, change the email password, turn on two-step verification if it is not already on, and sign out of other sessions or devices. Check for unfamiliar forwarding rules, auto-replies, recovery email addresses, recovery phone numbers, and connected apps. -
Secure the accounts that could cause fast harm.
Prioritise banking, card accounts, payment services, your main cloud storage, your mobile provider account, and any password manager. Change passwords where needed, sign out other sessions where the service allows it, and review recent account activity. -
If a password manager was on the laptop, follow its lost-device steps.
Sign out the stolen device if possible, review trusted devices or sessions, and change the master password if the provider recommends or allows it. Change the passwords for your most important accounts first if you think the vault, browser, or device may have been unlocked. -
Tell work, school, or the organisation responsible if their data may be on it.
Use the official IT, security, or data-protection contact. They may be able to disable work access, trigger a managed wipe, preserve records, and decide whether any data-protection reporting is needed. -
Report the theft and keep the reference number.
If you are in immediate danger, call 999. Otherwise report the stolen laptop through your local police force’s online route if available, or call 101. Keep the crime reference number for your insurer, employer, bank, or device provider. -
If identity documents or financial papers were stored on it, add fraud friction.
Watch bank and card accounts for unfamiliar activity, contact your bank immediately if anything looks wrong, and consider checking your credit files for searches or accounts you do not recognise. If scans of a passport, driving licence, bank statements, payslips, tax letters, or National Insurance details were on the laptop, you may also consider Cifas Protective Registration. -
If fraud, impersonation, or cyber crime appears, report that separately.
Report fraud or attempted fraud to Report Fraud, and keep any reference number. Also contact the affected bank, card provider, service, or organisation directly using contact details from their official website or app, not from a message sent to you. -
Make a short “what was on it?” list while your memory is fresh.
Include passport or driving licence scans, bank statements, payslips, tax letters, tenancy documents, medical letters, client or student information, saved passwords, browser sessions, cloud folders, and local backups. Use this list to decide what to secure next.
What can wait
You do not need to decide today which replacement laptop to buy, whether to change every old password, or how to rebuild your whole security setup. Insurance claims, device replacement, and longer tidy-up tasks can wait until email, financial accounts, cloud storage, work access, and fraud risks have been contained.
Important reassurance
A stolen laptop with personal documents on it is upsetting, but it does not automatically mean someone can use the documents or access every account. Locking or erasing where possible, securing email, removing sessions, and contacting the right organisations are practical steps that reduce the risk of lasting harm.
Scope note
These are first steps for the first hours and day after a stolen laptop. Later decisions, such as credit file disputes, organisational data-protection reporting, insurance claims, or specialist fraud support, may need help from the relevant provider or specialist service.
Important note
This is general information, not legal, financial, cyber-security, or professional advice. If you believe you or someone else is at immediate risk, contact the police using the appropriate emergency route.
Additional Resources
- Police.uk — How to report
- Police.uk
- National Cyber Security Centre — Data breaches: guidance for individuals and families
- National Cyber Security Centre — Top tips for staying secure online
- National Cyber Security Centre — Advice for End Users
- Information Commissioner's Office — Report a breach
- Cifas — Protective Registration
About this guide
This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.