Most Britons would not know how to react to dark web data

SOFIAH NICHOLE SALIVIO

News Editor

Some 72% of Britons would not know how to respond if their personal data appeared on the dark web, according to Bridewell. The finding follows a recent cyber incident involving Department for Education records.

The cybersecurity company surveyed 1,000 UK adults and found a broad gap in public understanding of what to do after a data leak. More than half of adults aged 35 and over said they would not know how to protect themselves if their data was exposed online.

The figures add to concerns about the impact of repeated cyber attacks on consumers, as stolen information is traded cheaply online. Personal details such as a full name, date of birth and bank details could be sold for as little as £5, while credit card details could change hands for around £8 and a scan of a driving licence for about £6.

The issue has drawn attention following the Department for Education breach, in which hackers obtained 607,000 records. The compromised data included telephone numbers and email addresses of individuals and organisations, but no sensitive or financial information was exposed.

Cyber attacks have also hit major retailers over the past year, including Marks & Spencer, Harrods and The North Face. In The North Face breach, cybercriminals used a technique known as credential stuffing, in which attackers try usernames and passwords taken from earlier breaches on other services in the hope that people have reused the same login details.

Age split

Bridewell’s survey suggested confidence levels varied by age, though not in a straight line. Among people aged 25 to 34, 46% said they would know what to do if their data was leaked on the dark web, making them the most confident group in the poll.

By contrast, only 32% of those under 25 said they would know how to respond if their data was found there. Among adults aged 35 and above, more than 50% said they would not know what action to take.

The results point to a wider consumer problem as more people store personal and financial information across shopping sites, social media platforms and other digital services for convenience. Criminals can extract more value by combining several pieces of information, such as a date of birth, passwords and security question answers, to impersonate victims or gain access to accounts.

Victims can face fraud, unauthorised access to bank accounts and attempts to open new lines of credit in their name. Recovery may involve financial loss as well as the lengthy process of restoring a stolen identity.

Another concern is that dark web prices can stay low because data is often sold in bulk and resold many times. That means even records with limited value on their own can become more useful to criminals when matched with information from other breaches.

Anthony Young, Chief Executive Officer of Bridewell, said: “As digital life becomes more integrated into daily routines, we must not lose sight of the risks involved in sharing and storing personal data online. Our survey highlights the urgent need to raise awareness and educate individuals on how to respond if cybercriminals compromise their data. Cybercriminals continue to increase their sophistication, so people must move beyond simply securing passwords to understand the full threat and take proactive steps to protect themselves.”

Bridewell urged consumers to check whether their email addresses or credentials have appeared in known breaches using established breach-checking services. If details have been exposed, it advised changing passwords immediately, avoiding common or predictable terms, and using different passwords across accounts.

Consumer steps

It also urged people to use password managers so they can maintain unique logins without relying on memory alone. Password managers can also alert users when a password has been involved in a known breach.

Adding two-factor authentication is another step recommended by cybersecurity specialists because it can block access even when a password has been stolen. Consumers should also monitor their credit reports for signs that someone has opened accounts or sought borrowing in their name.

The survey underlines how cyber risk is no longer limited to businesses and public bodies that hold large volumes of data. For individuals, the challenge is often less whether data may eventually be exposed than whether they know what to do when it happens.

Young also warned that the economics of online crime leave consumers exposed even when the price attached to their data looks small. “In reality, people buy and sell personal data on the dark web for a fraction of its true value, putting millions at risk. Businesses must also protect their customers’ information and should regularly educate them on safe digital practices.”