Skip to content
View all posts

6 Steps to Take After Finding Your Data on the Dark Web

By: Jill Franks + Ashley McVicker + Jared Gravatt

6 Steps to Take After Finding Your Data on the Dark Web
Apple Spotify YouTube

Today we're exploring something that might sound a bit mysterious—the dark web. Now, the dark web can seem like something out of a thriller movie, but it’s very real and has real-world consequences. By the end of this blog post, you'll know what the dark web is, how to find out if your information is out there, and how you can protect yourself. 

What Is the Dark Web?

Let’s start by breaking down what the dark web is. Imagine the internet as a giant iceberg floating in the ocean. The part of the iceberg that’s above water is the internet we all know and use every day—this includes websites like Google, social media platforms, online shopping sites, and news outlets. This part is called the surface web, and it’s what’s easily accessible to everyone.

Now, beneath the surface, there’s a much larger part of the iceberg hidden underwater. This is what we call the deep web. The deep web includes everything online that isn’t easily found or accessed through search engines. Think of it like the behind-the-scenes stuff: private databases, academic papers, or anything that requires a password to access, like your email inbox or online banking account. It’s still a normal part of the internet, just not something you can stumble upon without the right access.

Finally, there’s a small, secretive part of the iceberg even deeper below the surface, and this is what we call the dark web. The dark web is a hidden layer of the internet that you can’t access using regular browsers like Chrome or Safari. To reach it, you need special software, like Tor, which hides your identity and lets you visit websites that end in .onion instead of .com.

While the dark web isn’t all bad—some people use it to protect their privacy or share information in countries with strict censorship—it’s also a place where illegal activities can happen. This includes things like selling stolen personal information, buying illegal goods, and more. That’s why it’s important to understand what the dark web is and how to protect your information from ending up there.

Is My Information on the Dark Web?

So, how do you know if your information is on the dark web? Unfortunately, data breaches—where hackers break into a company’s system and steal personal information—happen more often than we’d like. When this happens, your information, like your email address, passwords, social security number, or credit card details, could be stolen and put up for sale on the dark web.

But don’t worry, there are ways to check if your information has been compromised. Websites like Have I Been Pwned allow you to type in your email address to see if it’s been involved in any known data breaches. Some services, like credit monitoring, also offer dark web monitoring, which alerts you if your personal information is found in the darker corners of the internet. Just remember, these tools aren’t perfect, so even if your information doesn’t show up, it’s still a good idea to stay vigilant.

The website for "Have I Been Pwned" is https://haveibeenpwned.com/. You can use it to check if your email address or phone number has been involved in any known data breaches.

Steps to Protect Yourself

 Let’s talk about how you can protect yourself and your personal information. Here are some steps you can take:

1. Use Strong, Unique Passwords:
The easiest way for hackers to get into your accounts is through weak passwords. Make sure each account has a different password that’s a mix of letters, numbers, and symbols. A password manager can help you keep track of them all.

2. Enable Two-Factor Authentication (2FA):
2FA adds an extra layer of security. It means that even if someone gets your password, they’ll need a second piece of information—like a code sent to your phone—to get into your account.

3. Keep an Eye on Your Accounts:
Regularly check your bank statements, credit reports, and any other accounts you use. If you see something that doesn’t look right, report it immediately.

4. Watch Out for Phishing Scams:
Phishing is when someone tries to trick you into giving them your personal information by pretending to be a legitimate source, like your bank. Always double-check the sender’s information and be cautious about clicking on links in emails or messages.

5. Consider Identity Theft Protection:
In today's digital age, protecting your identity is more important than ever. Services like LifeLock or IdentityForce can help you monitor your personal information and even provide insurance in case your identity is stolen. But did you know that you can also secure this protection directly through your bank? Farmers State Bank offers Kasasa Protect, an affordable and comprehensive identity theft protection service that goes beyond basic monitoring. Kasasa Protect not only monitors your personal information but also includes dark web monitoring, credit reporting, lost wallet protection, and more. Plus, if the unexpected happens, you'll have dedicated recovery specialists to help restore your identity. Choosing Kasasa Protect through Farmers State Bank means safeguarding your financial future with a trusted local partner.

6. Be Careful with Public Wi-Fi:
Public Wi-Fi networks are often less secure. Avoid accessing sensitive information, like your bank account, when using them. If you have to, consider using a VPN, which helps keep your data safe by encrypting it.

I’m on the Dark Web. What Now?!

1. Consider Placing a Credit Freeze:

One of the strongest steps you can take to protect your personal information is to place a credit freeze on your credit reports. But what exactly does that mean? A credit freeze essentially locks down your credit report so that no one—not even you—can open new credit accounts in your name. This is a powerful tool to prevent identity thieves from taking out loans, opening credit cards, or getting other types of credit using your identity.

When you place a credit freeze, lenders won’t be able to access your credit report, which they need to approve any new credit applications. This means that even if someone has your Social Security number and other personal details, they won’t be able to use them to open new accounts.

To place a credit freeze, you need to contact each of the three major credit bureaus: Experian, TransUnion, and Equifax. You’ll be asked to provide personal information, including your name, address, date of birth, and Social Security number. After processing your request, each bureau will send you a confirmation letter that includes a unique PIN or password. This PIN is incredibly important—you’ll need it if you ever want to lift the freeze, whether temporarily or permanently.

Here’s how you can contact each bureau to place a freeze:

  • Experian Credit Report Freeze: Call 1-888-397-3742 or visit their website.
  • TransUnion Credit Report Freeze: Call 1-888-909-8872 or visit their website.
  • Equifax Credit Report Freeze: Call 1-866-349-5191 or visit their website.

2. Consider Placing a Fraud Alert:

If you’re not ready to fully lock down your credit with a freeze, another option is to place a fraud alert on your credit report. A fraud alert doesn’t block access to your credit report like a freeze does, but it does add an extra layer of security by requiring creditors to take additional steps to verify your identity before approving new credit in your name.

There are three types of fraud alerts:

  1. Initial Fraud Alert: This is great if you’re concerned about identity theft but haven’t been a victim yet. It requires creditors to verify your identity before extending credit for at least 90 days. You can renew it if you’d like.
  2. Extended Fraud Alert: If you’ve been a victim of identity theft, you can place an extended fraud alert, which lasts for seven years. It provides the same protections as the initial alert but for a much longer period.
  3. Active Duty Military Alert: This is specifically for military personnel who are deployed. It lasts for one year and helps protect your credit while you’re away.

Placing a fraud alert is free, and you only need to contact one of the three major credit bureaus—they’re required to notify the other two. Here’s how to reach them:

  • Experian Credit Report Freeze: Call 1-888-397-3742 or visit their website.
  • TransUnion Credit Report Freeze: Call 1-888-909-8872 or visit their website.
  • Equifax Credit Report Freeze: Call 1-866-349-5191 or visit their website.

A fraud alert is a good middle ground if you want extra security without fully freezing your credit. It’s especially useful if you think your information might be at risk but aren’t ready to commit to a credit freeze.

3. Review Your Credit Reports:

If your Social Security number or other personal information is found on the dark web, it’s crucial to check your credit reports to see if someone has already used your information to open new accounts. Identity thieves can use your details to apply for credit cards, loans, or even mortgages in your name without you knowing.

To keep an eye on your credit, you should regularly review your credit reports from the three major credit bureaus: Experian, TransUnion, and Equifax. By law, you’re entitled to a free credit report from each bureau once every 12 months, which you can get by visiting AnnualCreditReport.com. During the pandemic, you could access your credit report for free every week, so it’s worth checking if that option is still available.

When you review your reports, look for any accounts or inquiries that you don’t recognize. An inquiry happens when someone checks your credit report—usually because you applied for credit. If you see anything suspicious, like accounts you didn’t open or loans you didn’t apply for, you need to take action immediately. This could involve contacting the credit bureaus to dispute the activity, placing a fraud alert or credit freeze, and notifying the companies involved that you may be a victim of identity theft.

4. Review "Additional Info" Bundled with Your SSN:

Sometimes, if your Social Security number is found on the dark web, it might come with other pieces of your personal information that were stolen during a data breach. This could include your credit card numbers, passport number, or even login credentials for your online accounts. Some of this information might be from accounts you’ve closed or canceled, but it’s still a red flag that you need to take seriously.

When you get a dark web alert, check the 'Additional Info' section to see what other data might be bundled with your Social Security number. This will give you a clearer picture of what information might be out there and what steps you need to take to protect yourself.

The Federal Trade Commission (FTC) offers a lot of guidance and resources for dealing with the theft of various types of personal information. If you find that your data has been compromised, you can visit their website at FTC Identity Theft for step-by-step instructions on what to do next. The FTC even has a support team you can chat with online if you need help figuring out your next steps.

Final Thoughts

The dark web may sound like a scary place, and in some ways, it is. But with the right precautions, you can significantly reduce the chances of your information ending up there. Remember, the best defense is awareness and taking proactive steps to protect your personal data. Stay safe out there!