Loading…
Loading…
Your data has probably already leaked. The question is: what can be done with it?
A data breach is the mass theft of information held by a service you use: emails, passwords, phone numbers, addresses, sometimes ID documents or banking data. These files are then resold, merged into gigantic lists (combolists) and exploited for years on the dark web, long after the original breach has been forgotten.
You can't stop a service from getting hacked. You can, however, make sure a leak grants access to nothing else: unique passwords, two-factor authentication, monitoring your exposure. This theme teaches you the life cycle of a breach and the right reflexes at every stage.
Understand what a data breach actually covers, before learning how to react to it.
A breach exposes data held by a service: you can't prevent it, you limit its impact.
10 exercises per level, mixing decision, spotting and quiz. The first 2 levels are free; the next ones open with the Pro or Elite subscription.
Each level ends with a mission: what remains to be done once the lesson is understood. Some rely on your report, others on a setting we cannot see: it says so each time.
Think of the passwords you used a few years ago. Do they still work anywhere, even on a forgotten account? Change them there. An old breach stays dangerous for as long as the password works.
Your scan checks your email address against known breaches, without ever asking for a password. Look at what comes out and start with the worst: a password or a card first, a lone address after.
In your email settings, open the forwarding and filter rules and delete any you didn't create. After a breach, attackers set up a quiet forward there to read your mail: it survives a password change.
Set a calendar reminder every 90 days to check your breaches again: past that, we treat a scan as too old. Turn on payment notifications from your bank too: a small unknown charge often comes before a fraud.
Pick a site or a broker that keeps your data for no good reason and send it an erasure request (Article 17 of the GDPR), with only what it needs to find you. Note the date: it has one month to reply, and it's free.