<prompt> Human: Firstly, thank you PF community for all your help so far. I had lurked on this subreddit until now and learned so much but I am now faced with an issue:I am participating in my company sponsored 401k plan and I received a notification saying that my sensitive personal information had been exposed. A spreadsheet containing my SS, dob, name, address, employment status, marital status and account balance was emailed to a participant in another retirement plan serviced by Schwab. The note stated that the person who received my information immediately notified the plan sponsor who notified Schwab and said they deleted the email and attachment. Schwab offered me a one year credit monitoring subscription from Equifax and apologized but I feel like that is not sufficient and that a company like this should not have let this happen in the first place. Has anyone experienced anything like this and how did you handle this? Should I notify my company HR department about this and what should I ask them? Do you think I should just take the one year subscription, just monitor my credit and be glad it wasnt worse?I am feeling pretty frustrated and disappointed right now but more unsure of how to proceed - any help would be appreciated.  <response>: Take the credit monitoring. The actual risk here is very low. Most likely the receiver was in an HR or payroll department and they see information like this every day. 