Dark Web

Bob23

Hi, BD has listed some names of companies that have ended on the Dark Web. I am unsure what they mean by changing my password as I have tried to get on the site listed to no avail. What can anyone suggest to get rid of these Dark Web listings. How can I change a password I already used on the listed sites so how will 2fa help. I will grateful for someones probably simple explanation to do this.

Flexx

https://community.bitdefender.com/en/discussion/101564/dark-web

This means that in the past, you had an account on those websites, and at some point, the company became part of a breach. Since you had an account with that company, you're receiving the warning. Now that your email has already been part of the breach, the best step is to change the password for your account with that company, if you still have one.

That being said, you will continue to receive warnings that your email is part of the breach because once an email is compromised, it remains flagged. However, changing your password will help secure your data moving forward.

If you don’t remember your password, simply go to the respective website, click on the login option, and select "Forgot Password." Then follow the instructions to reset your password.

Regards

Bob23

Hello Flexx thanks for your guidance but on three of those listed when I choose forgotten password and I use my email address they come back as Applicant Unknown and these are all low threat listings. Can I just leave them.? Sorry to be a pest.

Flexx

https://community.bitdefender.com/en/discussion/comment/344260#Comment_344260

The best option would be to get in touch with their support, inform them about the breach, and ask for assistance regarding it.

Regards

Alexandru_BD

Hello,

There's not really much you can do to get rid of those Dark Web listings, unfortunately.

To find stolen data, Bitdefender scans the dark corners of the web using various methods. Once the data is found, it uses a proprietary system for identity resolution to discover the identity of the breached individual, so it can alert the person about the breach, even if the breach itself includes little or outdated information.

Most commonly, breaches include information about users’ emails, passwords, names and usernames, phone numbers, and physical addresses. Their exposed data creates a snowball effect that ultimately leads to the leak, sale, or trade of entire digital identities on the Dark Web.

Breaches are not necessary found on a specific website. They are in a compilation of usernames, passwords, phone numbers, etc. found in archives or texts on the Dark Web, in general.

The Digital Identity Protection service raises awareness about your Digital Footprint (data exposed in Surface Web) and remediation steps for data breaches (data exposed in Dark Web). However, you would not be able to change the username for a specific website, but you will be informed that in that specific period, data about you has appeared in data lists on the Dark Web.

This means that you could become victim of a scam. As the purpose is to raise awareness of these breaches and the data involved can be various, there are no mitigation steps for the situation. If the breach was about a password, you could have changed it, but the breach can also involve other types of data, such as phone numers, address, etc. And if these are listed somewhere on the dark corners of the web, there is no possible way to retrieve or delete them from there, because you don't have control over that leaked information.

I hope the information is helpful.

Regards,

Alex