In my previous article, Your Public Information, we learned that your information doesn’t have to be part of a data breach to exist on the internet. Each of those services scours the internet to aggregate and correlate information that may not otherwise be indexed by a search engine (e.g. Google, Bing, DuckDuckGo, etc).
We also learned that the sites do allow you to “request” your information be removed from their site. The problem is that there are many sites that aggregate your information. The sites I previously discussed are just three of many.
Multiple Sites Offer Aggregated Information
Using Google, we can search for “alternatives” or “similar” websites to any of the sites discussed. My example below searches sites similar to Spokeo.com:
Slashdot.org lists approximately 50 alternatives to spokeo.com. Their results don’t even include all the examples from my previous article. For an individual to manage their online footprint, they would need to identify every site that aggregates their information, search them, then request each site to remove their information. For three sites, that is manageable. For 50+, that can be overwhelming.
There are Services Who Can Help
Managing these sites who aggregate your information can be daunting. Luckily, there are services that can assist with notifying, opting out, and removing your personal information. These sites typically require a fee that can be paid one time or subscription based. Their service offerings to vary. It is best to do your own research to match services to your individual needs.
Note: I have not tested these sites nor do I endorse them. They are provided for information purposes only.
DeleteMyInfo: Found via a google search cites being featured on several major US news media sites and offers subscription pricing for individuals. They also offer a service to assist businesses to manage their online reputations as well.
ZeroFox: They offer “executive protection” service that should identify information listed within data broker sites and will request removal on behalf of their client. ZeroFox is a true play cybersecurity company that focuses on attack surface management and threat intelligence.
How to Choose a Service
Performing research and validating these companies can do what they claim to do is not as simple as it seems. Before signing up, perform some research about the company. Here’s a few steps to get you started:
- Leverage an internet search engine to find reviews about their products and services. Previous customers may have posted on google.com, yelp.com, reddit.com or other sites revealing experiences with their service. Even sites like GlassDoor.com can provide perspective on how the company operates internally.
- For United States based companies, search the Better Business Bureau’s website for previous complaints, compliments, and ratings.
- Ask around. Ask for referrals. Ask cybersecurity personnel on LinkedIn, twitter, or reddit. Most individuals won’t be shy to share their perspective or offer additional advice on removing information.
- Contact the company for a demonstration. Most reputable companies will want to talk with you and address any questions you may have. You may even have a chance to negotiate a better price should you move forward with them.
End… or Not
Your information doesn’t need to be exposed in a data breach to end up on the internet. Sites, called data brokers, source your information from various public repositories and aggregate it. Making it available for free or a small fee. Most of those sites do allow an “opt out” feature, but you have to manually request to opt out from every site that holds your data. There are services that can assist with identifying and removing your information on behalf of you. Once your information is removed, that doesn’t mean it is gone forever. Rather, you’ll need to maintain a pulse on these current and any future sites to make sure your information doesn’t resurface.
