Sponsored by
Are you oversharing? These are the 10 pieces of information you don't want to give away – ranked
If you didn’t know already, now you do – it’s Data Privacy Week (January 27th to 31st)! The brainchild of the National Cybersecurity Alliance, it aims to arm you with everything you need to spot and avoid the biggest risks to your data privacy and “Take control of your data”.
Data Privacy Week is upon us, and what better time to reflect on our online privacy, specifically the personal data we find ourselves forking over? It’s not unusual for websites, services, and apps to request our data. Whether it's required to create an online account or offer personalized content, many of us are only too happy to give away some seriously sensitive details – sometimes without fully understanding the ramifications.
It’s not always easy to know which pieces of personal information are safe to part with – or indeed when it’s appropriate to do so – versus which personal data we’re best off holding onto. It’s with this in mind that I’ll rank the most dangerous pieces of personal data we're often asked or encouraged to part with.
1. Social security number
Your social security number is a permanent, unique identifier used for tracking income, filing taxes, receiving government benefits, and much more. Needless to say, this makes it all the more valuable.
Should cybercriminals obtain your social security number, they may use it to commit identity theft, take out loans in your name, open bank accounts, or even claim government benefits.
Even sharing your social security number on platforms that are seemingly legitimate and trustworthy can be risky – particularly because data breaches are increasingly common.
Once stolen, your social security number may be sold on the dark web and used for fraudulent activities, and this makes it all the more important to keep it both private and secure.
2. Passwords
There’s only so much hackers can do with your personal data. However, if they have access to your passwords, the consequences can be severe.
If someone has your password and can log into your account, they can then take over your account, making it difficult to reclaim it. They may also steal further sensitive information such as your name, address, or financial details. This all makes it that much easier to impersonate you and make fraudulent transactions.
Looking for a nifty way to generate strong passwords and keep track of them? Check out today's best password managers.
There may be times when sharing a password with a friend or family member seems harmless – but there’s no guarantee it will be properly secured. Further, cybercriminals may intercept passwords shared on platforms or networks that don’t have the necessary protections in place.
Of course, if you re-use passwords across multiple platforms, a single compromised password can provide access to multiple accounts which has the potential for even greater damage.
3. Financial details
With your financial details, those with malicious intentions can potentially make unauthorized transactions, steal funds, or commit identity fraud by impersonating you outright.
Sharing bank details becomes that much more dangerous when combined with other identifiable information such as your name, address, or social security number.
Even on trusted websites and services, sharing financial details isn’t without some risk. A data breach could see this data stolen by hackers and ultimately sold on the dark web before being used for various illicit activities.
4. Full name
Giving away your name online might not seem such a big deal. However, it’s a key piece of personal information often used to verify your identity – be it for banking and legal documents, or other sensitive accounts.
A bad actor may combine your full name with other publicly available information to commit fraud
A bad actor may look to combine your full name with other publicly available information such as your address to commit identity fraud or target you in a social engineering attack.
Beyond identity theft, publicly sharing your name online runs the risk of privacy invasions including stalking and harassment. If someone knows your name and links it to a social media profile, they can potentially glean further information regarding your family, location, and workplace. Your current or even potential employers may use your name and other personal details to look you up online.
5. Address
It may be that your address is already accessible online – but openly sharing it makes it even easier for malicious individuals to track you down. Doxxing, stalking, and harassment are all potential risks.
A cybercriminal can monitor your social media posts and online activities to piece together your travel plans and daily routine. This, ultimately, makes it that much easier for them to plan things like home invasions knowing that you'll be away.
Giving away your address online also makes you that much more vulnerable to scams and fraud. For example, scammers may use your address to send you fake invoices or deliveries with the aim of pressuring you into paying for something you never ordered.
6. Your birthday
Your date of birth is often used to verify your identity for accounts and services – and this makes those digits particularly valuable to attackers.
Seeing a lot of eerily personalized ads? Head on over to our guide to targeted ads to see how (and why) they pop up.
By combining your birthday with other personal information, such as your name or address, cybercriminals may attempt to impersonate you and commit identity fraud. This could mean applying for loans and credit cards in your name, creating fake accounts, or simply accessing sensitive existing accounts.
Advertisers also value personal information such as your birthday because it allows them to deliver tailored ads based on your age demographic. More relevant ads aren’t necessarily a bad thing – but it does raise some privacy concerns if the data collected isn’t properly secured or if it’s shared further without your knowledge or consent.
7. Phone number
Cybercriminals can use your phone number in a number of ways. One of the common dangers is the phone number being used to reset accounts, such as social media accounts, to gain access to them.
However, a phone number can also be used to impersonate you, incriminate you, or deceive family members, friends, or work colleagues.
Giving out your phone number online also increases the risk of unwanted contact including sales calls and robocalls. A phone number can be used in a SIM-swapping attack in which attackers gain control of your phone to bypass two-factor authentication (2FA) and access your online accounts.
8. Workplace details
Sharing workplace details exposes you to numerous risks – including identity theft. Cybercriminals can build up a profile about you by acquiring information regarding your position or your employer.
Oversharing online can land you in hot water with your employer
They can then use this information to impersonate you or target your organization with phishing attempts or ransomware, both of which can be extremely costly – both financially and to a business’s reputation.
It’s also worth keeping in mind that publicly sharing certain workplace information may be in breach of confidentiality agreements and privacy policies. Oversharing online, such as on social media, runs the risk of landing you in hot water with your employer, leading to disciplinary action or the loss of your job.
9. Email address
One piece of personal data we consistently give away is our email address. After all, a lot of sites and services require an email address during the sign-up process.
Depending on the nature of the site or service, you may not always want that link between you and the service, which is when a temporary email or email alias may come in handy.
Of course, the more often you give out your email address, the higher the risk that it will eventually be compromised in a data breach. Should your email address be publicly shared online or sold on the dark web, cybercriminals may use it to send phishing emails or emails containing malware.
A bad actor can also use your email address in credential stuffing attacks, resulting in your email account becoming compromised.
10. Photos
The more of your personal data you share, the more material you’re giving fraudsters to work with – and this extends to sharing photos.
The trouble with uploading photos online is that, depending on where you’re uploading them, they can then be downloaded, edited, and shared, often without your knowledge or permission. As such, it’s very difficult to maintain control over the photos you share online.
Embedded metadata, like geotags, can give away your current location
Photos can inadvertently reveal sensitive details such as your current location. Even if your location isn’t clear, embedded metadata such as geotags can give it away. This can lead to stalking, doxxing, or even a home invasion.
Background details in photos such as documents or a computer screen may reveal more than intended, too. Scammers may use your photos for identity theft or fraud, creating fake IDs and social media profiles, or engaging in catfishing schemes.
