What should a Subscriber do if their PIN or token is compromised?

• A. Wait 24 hours before reporting
• B. Report the compromise immediately
• C. Change their password and continue using the token
• D. Attempt to fix the token themselves

Answer: (B)

When credentials like a PIN or security token are compromised, reporting it immediately is essential to contain the breach. Prompt notification allows security to revoke or invalidate the compromised token, reset the PIN if needed, and monitor for unusual activity across accounts and sessions. Acting quickly reduces the window of opportunity for an attacker to misuse the credentials and access sensitive data or systems. Simply changing a password won’t automatically neutralize the threat if the token itself remains in the attacker’s hands or could be reused for authentication. Trying to fix the token yourself can lead to misconfigurations or leave the system in a vulnerable state; official remediation steps are needed. So, reporting right away to the security team or IT help desk is the best course to minimize damage and restore secure access.