With these two recent breaches, I realized that my email address has become a security risk. Email has long been a vector for spam and phishing, but it has now become a proxy for identity. But when it becomes tied with your identity, and is used to authenticate you, it becomes valuable. On it's own, an SSN is a pretty meaningless, useless number. My personal email address has become like my Social Security number. So I can expect brute force attacks on the sites. Unfortunately, several sites use email address as the username for their site login, or for password resets, or as an additional layer of verification. The problem is that several of these breaches have included my "personal" email address.
It's going to get far worse before it gets better. I don't see data breaches decreasing any time soon, and I assume that we will continue to see an increasing number of breaches in coming years. And this doesn't include all of the shady data brokers who buy and sell your data constantly. I happen to know that December 2022 is missing several significant entries. Here is just a partial list of breaches that occurred in 2022. Last week I discovered that my personal information was included in 2 massive data breaches in under 24 hours.ĭata breaches aren't new, and have unfortunately become so common that I don't think they garner any more than an eye roll or a shrug these days.
0 kommentar(er)
