Hello
I received a notification that some of my details were included in a Data Collection on the dark web.
The notice mentions 4 elements of personal data:
- Email address
- Domain
- Usernames
- Passwords
However the notice only provides my email address and gives no further information as to the other 3 elements.
The noted rectification is to change the password and ensure 2FA is enabled for my email provider but as email addresses are typically used across multiple websites as your username, how can I be sure without further information that the information online is limited to accessing my email address rather than another website?