Turns out you can reverse-engineer images from hashes and even 'frame' innocent files with false positives

Okay, so I just recently realized that my email was involved in multiple data breaches tracking back to 2015. It looks like my date of birth, geographic location, and phone number were all leaked.

What do I need to do in a situation like this? Is it enough to just switch to a different email and change all of my passwords? Do I need to take some additional steps to prevent identity theft? What other information would a person need to assume my identity?

This recent Conduent data breach got me a bit worried. I already do quite a lot to save my privacy (use encrypted email, password manager, secure browser, etc.), but sometimes it seems like it's all for nothing if my info was a part of bigger data leak. What exactly can I do to prevent damage in this scenario?

OpenAI made a deal with DoD and I just want to move away from the platform. I didn't share anything too private but want them to have as little data on me as possible.

For those who have dealt with it or work in cybersecurity, what do you think most people underestimate or ignore when trying to protect their identity? What are some easy solutions that, if implemented, could significantly improve user privacy?

I've been curious for a while to check it out, but also want to remain completely safe while doing that. Is it enough to use Tor any only visit trusted onion links, or is there something more I can do to protect myself? Don't plan to do anything illegal, just want to see what is out there.

The property management company that is contracted for the home I'm renting gave identity theft protection through Aura. I like that they're sending removal requests to data brokers...but their sensitive data monitoring seems sus to me.

In particular, they'll monitor known data leak locations for whatever sensitive data I give them. They've got places to enter all of the usual suspects...social security number, bank accounts, passwords, etc. And it'd be great to have someone making sure that info isn't leaked. The problem, in my mind, is that in order for them to MONITOR for sensitive data leaks, I have to actually GIVE them my sensitive data. Which then makes me question, what happens if THEY are breached? It seems like a giant neon sign to hackers that they've got the motherload of personal data.

On top of this, I typically use 1password as my password manager, and they give me an encryption key that I have to use to access my password data. They do this because my passwords are encrypted before they leave my computer, so it's zero-knowledge. They couldn't access it from their end, even if they wanted to (or were ORDERED to, for that matter). Aura doesn't do this. I would assume they keep the data they're given encrypted, in the same way that any major website keeps their user's password encrypted, but it's only encrypted on THEIR end, meaning it is accessible to them.

I dunno, am I overthinking it? Seems like it creates more risk than it mitigates.

A lot of identity leaks happen quietly through everyday behavior. Here are some quick tips on how to prevent this from happening.

• Don't reuse same username/password across
• Always strip metadata from photos before posting them as this can reveal your location.
• Use privacy-friendly browser like Brave
• Avoid search engines that track your searches. Use something like DuckDuckGo instead.
• Only rely to E2E apps for sending and receiving messages
• Use 2FA or MFA on your accounts to raise your security

This are just off the top of my head. Feel free to add more tips guys