Personal data is anything that can be linked to you as an individual and it includes:
Name Address (current and previous) Date of birth Email address Health data, including scans and test results Identity documents such as passport, driver’s license and so on Employee data Bank and other financial details Login credentials Location data Biometric data Information on your political or religious views
This list is by no means exhaustive. A study by Armor which looked into black-market prices for personal data found that amounts paid for data varied from $40 to $200, with prices hitting as much as $2,000 for U.S. Green Cards and visa bundles. Identity theft is also on the rise. Javelin Research found that in 2017, more individuals than ever before in history had their identity stolen. In the U.S., this equates to 16.7 million people having their identity stolen to be used in fraud and other nefarious deeds. Social engineering is behind many data breaches. The 2018 Data Breach Investigations Report by Verizon found that around 98 percent of security incidents and 93 percent of data breaches involved behavior manipulation or phishing. But what do cybercriminals do with our data? Here are some of the ways that our personal data is misused and abused:
Sold on for secondary attacks such as fraudulent loan applications Used to set up accounts to commit fraud Used to access health services using your identity Make fraudulent payments Use data for extortion and blackmail To use in targeted phishing attacks
And then there is account takeover. According to the 2018 Identity Fraud Study, this most sinister of attacks has increased three-fold. Once a cybercriminal has access to your online account, they have access to a lot of personal and private, sensitive data. The gloves are off, and we need to fight back against those who would impersonate us, sell our personal data and use our digital being to line their own pockets. Here are 10 ways that you can make sure that your personal data doesn’t become someone else’s. [FREE] A User’s Guide: 10 Ways to Protect Your Personal Data Download This Free Training Poster
The Top Ten
1. Don’t click that link!
What to do: Don’t click links in emails. Instead, type the URL of the service you want to log into directly in the browser. Why: According to Microsoft in their Security Intelligence Report (SIR), phishing is still the number one favorite method of cyber-attack. In the 2018 Data Breach Investigations Report by Verizon, they found that 30 percent of people clicked on links in spoof emails. If you click the link, there is a very high chance you will reveal personal data and/or have malware installed to your device, which will, ultimately, steal personal data.
2. Come back for a second (factor)
What to do: Use a second factor for logging into accounts and use password phrases, not short words Why: Robust authentication is one we keep coming back to. If you have a good second-factor in place for logging in to online accounts, then you are much less likely to lose personal data due to phishing or other means of unauthorized access.
3. Shhh … someone is listening (whispering digital assistants)
What to do: If you use a personal assistant, make sure you delete recorded conversations regularly. Also mute your digital assistant if you aren’t using it. On a related note: The Internet of Things (IoT), in general, often relies on your personal data to either perform a task or simply to record your ownership. Making sure that the personal data held within the IoT is protected in the same way you would any data is important.
4. Keep it clean — delete old files
What to do: Make sure that you keep data replication to a minimum. Delete old files you don’t use. This includes shredding paper documents and mail. Why: The watchword of cybersecurity is “de-risk.” There can never be 100% security but reducing the number of places that can be compromised helps to reduce the risk.
5. Be less social
What to do: Minimize the amount of personal data you have on social media platforms. This includes things such as dates you will be away from home and personal details such as mother’s maiden name, favorite pet name and so on. Why: Social media is an open pool of data that cybercriminals can dip into at will. Information such as mother’s maiden name is sometimes used to recover account credentials — don’t give hackers an easy way into your online accounts!
6. Don’t sync for sync’s sake
What to do: Disable automatic file- and media-sharing unless you really need to do it. Why: A lot of devices set up cloud syncing when you first configure the device. This means that you may end up with files containing personal and sensitive data (including images) in a cloud repository when you don’t need to.
7. Keep off the beaten track
What to do: Disable location tracking on each app. You might also want to disable Android Device Manager, but this is a double-edged sword as it can help you to locate a missing phone. Also check the privacy policy of your apps. Why: A recent study of almost 1 million Android phones showed apps regularly harvested tracking data.
8. Let sleeping Bluetooth lie
What to do: If you are not using Bluetooth, switch it off. Why: Bluetooth vulnerabilities can allow data to be siphoned off. The BlueBorne vulnerability is a risk for all mobile devices that use the Bluetooth connections.
9. Encryption is your friend
What to do: Encrypt any data you store on hard drives and use apps like Telegram if you share personal data. Why: There have been almost 13.5 billion data records lost since 2013 and only 4 percent of those were encrypted. Encryption is a layer of protection that can prevent lost or stolen data being exposed.
10. A patch in time
What to do: Keep your computers and mobile devices patched and up to date. Why: Software vulnerabilities allow malware to infect your device. Malware steals data and login credentials to online accounts.
