A phone call from your bank alerting you about suspicious activity on your account may seem routine. The caller provides your name, address, and birth date, leading you to believe it’s a legitimate outreach. However, this may be a trap set by criminals using your personal information to impersonate bank officials.
Dates of birth (DOB) often become compromised due to their inclusion in various online accounts, such as retail sign-ups, loyalty programs, and competitions. For instance, during a recent breach at Asos, customers’ birth dates were among the sensitive data exposed.
Cybersecurity experts are urging individuals to think twice before sharing their DOB online. They recommend using fictitious dates to protect personal information and thwart criminals who might piece together identities for fraudulent activities.
Jake Moore, an advisor at ESET, emphasizes that while a birth date alone isn’t particularly valuable, when combined with other information like names and phone numbers, it can facilitate identity theft.
Research by Alexandre François from WhoisXML API revealed that eight out of fourteen retailers surveyed require a DOB during the sign-up process. He points out that retailers have little incentive to remove this requirement, as knowing a customer’s age can enhance marketing strategies.
Identifying the Threat
Once a breach occurs, affected individuals may receive notifications, either via news outlets or emails from the concerned organization. Scammers can leverage stolen data to craft convincing phishing attempts. According to security expert Serpil Hall from Datos Insights, compromised information on the dark web can bolster the authenticity of phishing emails and help hackers impersonate victims during customer support calls.
Protecting Yourself
Vigilance is crucial when contacted by unknown individuals, even if they possess extensive personal information. Moore advises only providing DOBs on low-risk websites and avoiding unnecessary personal data entries altogether.
François asserts that retailers require merely your payment information and delivery address. Age verification is essential only for purchasing certain items, such as knives. For most transactions, a real DOB is only necessary when interacting with institutions that verify identities, like banks and governmental agencies. Retailers don’t require such details.
He suggests leaving the birthday field blank when possible. If not, using a standard date—perhaps the first of your birth month—across all platforms may help you manage it easily.
Editor’s Take
This development underscores the growing need for personal data protection in an era where digital threats are prevalent. Users should be increasingly cautious about the information they share online, as even seemingly innocuous data can fuel scams. For businesses, re-evaluating data collection practices can enhance security measures, ultimately fostering greater trust among their customer base.
Source: www.theguardian.com
