If your private information lands on the dark web, it’s normal to be worried. But just because your data made it there, doesn’t mean you are — or will be — a victim of identity theft. Dark web monitoring services, like the one we provide, will keep you in the loop should your information be compromised, allowing you to take preventative measures like canceling your credit card, changing your passwords, and keeping a close eye on your credit report for signs of fraud.
Getting notified that your credit card or email address was spotted on the dark web can be unsettling. It can leave you feeling vulnerable or exposed — and that's normal.
But there’s good news: even if some of your personal information lands on the dark web, you’re not necessarily a victim of identity theft. Knowing that your data is out there will allow you to take proactive measures to minimize your risk of falling victim to identity theft and financial fraud.
First things first: what is the dark web?
The dark web, or “darknet,” is a section of the internet that allows users to operate with complete anonymity. It’s not accessible through normal web browsers or search engines; rather, it’s only accessible via special software, configurations, or authorizations.
Because it offers this cloak of anonymity, the dark web is used by a host of bad actors — including identity thieves, hackers, drug dealers, traffickers, and terrorists — and can be a conduit for criminal activity.
But the dark web serves legitimate purposes as well. In fact, organizations like the CIA (Central Intelligence Agency)rely on it as well to communicate securely with sources or informants.
How your information might end up on the dark web
Oftentimes, large sets of private data are stolen through data breaches or phishing attacks, then sold anonymously to identity thieves via the dark web.
Due to the complex nature of searching the dark web, investing in a dark web monitoring service — like the one we provide in select Allstate Identity Protection plans — can help keep you informed if your personal information lands on that side of the internet.
Using a combination of artificial intelligence and effort from human operatives, our monitoring culls the darknet for information associated with your identity. If we find something, we will let you know via email and/or text (depending on the alert preferences you set for your account), so that you can take immediate action.
What to do if your information is found on the dark web
You were notified that a piece of your information was tracked on the dark web, now what?
First off, don’t panic. Just because your information is on the dark web, doesn’t mean you are — or will be — a victim of identity theft.
It may, however, make you an easier target in the future, so it's important to take steps to protect your identity and digital devices.
If your email address is found on the dark web…
Change your password for that email account.
Identify all online accounts that use that email address as a username.
Change your username and password for those accounts as well.
If your username is found on the dark web…
Identify which accounts are associated with the affected username.
Change the password (and username, if you are able) for the compromised account, and enable additional security measures such as two-factor authentication.
If you use that username on other websites, change the password and username for those accounts as well.
If your debit or credit card number is found on the dark web…
Contact your bank or credit card provider and request a new card.
Review your account statements for fraudulent activity and notify the financial institution if you find any. (Make it a habit to review your account statements regularly. If you don't catch fraudulent transactions within the same billing cycle, your bank or merchant is less likely to reverse or refund the transaction.)
If your Social Security number is found on the dark web…
Monitor your credit report for unauthorized activity.
If you notice anything suspicious on your credit report, report it to the credit bureaus right away.
Additionally, alert the Social Security Administration and Internal Revenue Service that your Social Security number may have been stolen.
If your driver's license is found on the dark web…
Review your credit report, as driver's license numbers can be used to open credit accounts.
If you notice anything suspicious on your credit report, report it to the credit bureaus right away.
Notify your local Department of Motor Vehicles if signs of identity theft arise.
If your IP address is found on the dark web…
Locate all devices used on that network (desktop computers, laptops, personal or work computers, mobile phones, etc.).
Using a computer with a non-exposed IP address, change the passwords for all websites and apps on that network.
How to keep your data private
Unfortunately, there’s not a surefire way to keep your information completely safe, as events like data breaches are outside of your control.
However, the smaller your digital footprint is (meaning, the fewer websites that you share your data with), the lower your odds of being a victim of a data breach.
Additionally, make a point to stay in the know on the latest phishing and social engineering scams, keep your devices up to date with software updates, and practice good password hygiene to keep your personal information as secure as possible and off the dark web.
