Breach IQ - which personal info

Corktown

Hello

I received a breach notice that my email, phone, etc was exposed. Is there a way to see specifically (eg my actual email and phone number) which info is exposed?

Flexx

https://community.bitdefender.com/en/discussion/103792/breach-iq-which-personal-info

Kindly check your email on the website Have I Been Pwned ( https://haveibeenpwned.com/ ), which maintains the largest collection of user data breaches associated with various companies.

The website will inform you if your email address was involved in any known data breaches and will identify the affected companies. If you recognize any of the breached services, it is recommended to change the password associated with that account as a precautionary measure.

Kindly note that even after updating your password, your email will still appear in the breach database, as it remains part of the historical breach records. However, there is no cause for concern—taking timely action to update your credentials helps ensure your account remains secure.

Regards

Alexandru_BD

To add here, there are legitimate concerns when personal information is compromised in a data breach, because the leaked information may end up in the wrong hands. It is of course recommended to secure your accounts, change passwords, adopt multi-factor authentication and the lot, but there's one more thing you need to pay attention to in the future: when your contact information is exposed (e.g., phone number, email, or street address), you’re likely to be contacted by criminals pretending to be a trusted authority to obtain even more private data to commit more targeted fraud, or you may experience an increased amount of spam emails or targeted phishing attempts, so it's always a good idea to remain vigilent.

The harsh reality is that there's no way to remove the leaked data once it's out there, because you have no control over the information that was leaked in the breach.

Corktown

I have hundreds of email addresses and don’t know which one to search on haveibeenpwned. Is there a way to see which email address breachIQ identified as compromised?

Alexandru_BD

If I'm not mistaken, BreachIQ belongs to ESET, and I'm not very familiar with their Identity Protection service..

Corktown

What is ESET / Should I post my question in a different forum?

Alexandru_BD

Well, you mentioned BreachIQ, so I did a bit of research and it turns out that this is a service provided by another antivirus vendor, ESET: https://help.eset.com/eidp/en-US/breach.html
Isn't this the one you are referring to?

Corktown

Not sure there is a misunderstanding. I’m asking about the data within my Bitdefender Ultimate Security Plus subscription. It sounds like you might be saying BreachIQ is a subcontractor, and that I need to contact Bitdefender’s subcontractor for service questions? Is there contact information? How will they know I am a customer?

Alexandru_BD

Ok, so you are using Ultimate Security Plus, which has the Digital Identity Protection service included.
I was a bit confused because you mentioned "Breach IQ." Bitdefender does provide a service for Digital Identity monitoring, but it is called differently.

It's not necessary to contact any third-party, if you are using Digital Identity Protection I can try to answer your questions here.
Data breaches, possible impersonation attempts, and new personally identifiable information appear in the 'Threats' section of DIP. There, you can follow the available remediation steps, tap each link and perform the suggested action, then mark the step as done. When it comes to data breaches, it’s important to know which company was affected by the breach, what type of information was compromised and how many people were affected, and the time period of the breach (if pertinent). Knowing this information can help determine whether or not your information is at risk. If you find out which company was affected, this can be a hint of what personal information was actually compromised, so if you know you have an account with that specific company or service provider, you can find out what are the credentials that were compromised, provided that you know of course which email address or other contact information you used to register with the respective company.

Now, since the leaked data can be in a compilation of multiple types of data, such as emails, phone numbers, addresses, etc., sometimes it can be difficult to identify exactly what type of data has been leaked.
If you have multiple email addresses, you may of course use this link to check them all and see which ones, if any, have been compromised:

https://haveibeenpwned.com/