Assignment # 2
By
Akshay Srivastava
09.21.20
With all the recent breaches, some involving Social Security numbers, home addresses, email
addresses, contact information, debit and credit card numbers, your personal information is at a
great risk.
Write a 2-page plan to help minimize the risk of your personal information being leaked
online. In this plan discuss how to mitigate this risk in case your personal information was
leaked in a data breach.
Plan to help minimize the risk of your personal information being leaked online:-
1. Use passcodes for all your devices
You could lose your mobile phone or laptop and would like to protect all the information stored
on these devices from anyone who finds it.
2. Use strong passwords for your online accounts
It is of utmost important not to have the same login credentials on different accounts, the reason
behind this is if there is a data breach with one website you only have to worry about one
account.
Using a password manager to keep track of so many sets of online credentials to commit to
memory.
3. Limit social media tracking
Sharing too much is not the only problem with social media, these apps or website try to keep a
tab on your activity and sell those to the highest bidder. Make sure not to browse the internet
with these in the background.
4. VPN (Virtual Private Network)
Trying to use VPN more often for my website browsing
5. Not logging onto free Wi-fi’s
I’ve seen this happen a lot, I’ll be walking in NYC and my pone connects to a free wi-fi,
changing the settings of not connecting to any open wifi.
6. Encryption
Start using free encrypting software for emails and files like GPG for mail on the Iphone,
7. Location data
Many of the apps use your location in the background keeping a tab on you, make sure to always
turn on the use location only while using the app.
How to mitigate this risk in case your personal information was leaked in a data breach.
1. Determine what was breached
Whether its names, addresses, email addresses, r SSN (social security numbers), it’s critical to
know exactly what information was stolen before determining what steps to take. For example, if
you are aware of your email being compromised, you will take extra precaution to strengthen
your email security.
2. Change affected passwords immediately
If you are notified of your account being compromised through your password breach, change
yours immediately after the breach. It is very important to have strong alphanumeric and special
characters in your password, also make sure you never reuse passwords from your other
accounts. Update these in your password managers.
3. Financial / Banking institutions
In cases with financial information was compromised, contact your bank to let them know about
it and try to get your credit / debit cards replaced. They might be able to put your credit card on
freeze and refund any fraud charges on them.
4. Avoid interacting with unknown people through email
Opportunistic malicious people know that millions of victims of any given data breach will
expects some kind of communication regarding hacked accounts. These scammers will try to
send out phishing emails spoofed to look like they’re coming from those hacked accounts in an
attempt to gather personal information
5. Use multi-factor authentication
It is pretty common for websites and apps to have two factor authentication. It could be linked
through your alternate email or phone number.