Don’t let dormant accounts become a doorway for cybercriminals

Do you ever feel overwhelmed by the number of online accounts you have accumulated over the years? It’s easy to forget about that free trial you never cancelled or the app you used once on vacation. Account sprawl is a real issue. According to studies, the average person has 168 passwords for personal accounts.

But having inactive accounts poses a security risk, both personally and professionally. They can be tempting targets for cybercriminals, so it’s essential to consider some spring cleaning to keep them in check.

Why are dormant accounts risky?

There are numerous reasons why you might have a plethora of forgotten, inactive accounts. We’re bombarded with new services and special offers daily, leading us to create accounts that we later abandon. However, leaving these accounts dormant can be a mistake. Inactive accounts are more susceptible to compromise, as they often use old or reused credentials that may have been exposed in past data breaches.

These dormant accounts can attract hackers who are increasingly focused on account takeover (ATO) through various methods such as infostealer malware, large-scale data breaches, credential stuffing, and brute-force techniques.

The consequences of inactive accounts

• Spam and scams sent to your contacts using your dormant accounts
• Potential identity fraud through stolen personal information or saved card details
• Accounts being sold on the dark web
• Funds being drained from forgotten bank accounts or crypto wallets

Dormant business accounts are also vulnerable, as they can provide access to sensitive corporate data and systems, making them attractive targets for cyberattacks.

Time for a spring clean?

What can you do to mitigate the risks associated with dormant accounts? Some service providers automatically close inactive accounts after a certain period to enhance security. However, being proactive with your digital security is crucial.

• Audit and delete inactive accounts periodically
• Update or delete passwords linked to inactive accounts
• Check account deletion policies to ensure removal of personal and financial information
• Consider enabling two-factor authentication for accounts you want to keep

By taking a few minutes each year to clean up your online presence, you can enhance your digital security and protect yourself from potential cyber threats.