Breach Data

According to the Australian Government, "A data breach happens when personal information is accessed, disclosed without authorization, or is lost." Once that data is out in the open, either sold for a profit or just shared online, that data is then known as "breach data." Not all data breaches contain the same type of data.

Some data breaches would only have an email and a password hash, while others would have IP addresses, last login times, plain-text passwords, etc. It depends on the breach and the industry of the company that was breached. For example, if you look at healthcare companies whose data has been exposed, you are more likely to find Social Security numbers in the data. However, this may not be the case if an online gaming company has its data breached.

There is usually a misconception about breach data, where people assume all breach data results from threat actors. Systems can be misconfigured, thus allowing anybody with internet access to view private files. Companies themselves can send data to the wrong parties, leading to a data breach.

Now that I have given a bit of background on what data breaches are, I will go into detail about how to leverage breach data to learn more about a target/subject while doing an OSINT investigation. It is interesting how it perceives the corrections and adapts the conversation to the new rules.

Read more : https://www.secjuice.com/leveraging-breach-data-for-osint/ 

*Beware click the link!