Open Source Intelligence or OSINT, is about finding online information. It is the collection and correlation of openly available data on the internet through the use of tools and search techniques. Many of these tools are a quick and free search that are readily available for anyone to use on the internet. There is a vast amount of information on every company and person in today’s virtual landscape. What data are you leaving exposed for others to take advantage of?

OSINT is commonly used during the reconnaissance phase of gathering information about a target before executing cyber attacks. However, gathering of openly available information has more applications than just targeting companies. The method often begins with the weakest link of an organization, you. OSINT can be performed by anyone with access to the internet, and a limited knowledge of the tools and techniques. This is not just about threat actors with the capability, it’s anyone with a motive. Understanding where and what kind of information is available about you and your company is the first step to securing your personal data.

Social Media: Applications such as Instagram, Facebook, LinkedIn, and X hold an alarming amount of personal information. Using a common or similar username across multiple sites can allow someone to track your online presence and begin to profile you.

The content we are eager to share can often reveal details about our work, or even our personal life that we do not intend to share. This can include birthdates, employment history, education, and even connections to family members or employees. Social media sites like Snapchat, Tik Tok, and Instagram often collect your location data, potentially leaving it available for unwanted eyes.

Online Shopping and Subscriptions: Depending on how companies protect their customer information this can lead to your purchase history, address, personal preferences, and even health conditions to be exposed without your knowledge.

Data inadvertently exposed online can be exploited in various ways. Details about your personal information can lead to identity theft, fraud, or targeted phishing attacks. For companies, such exposure could reveal vulnerabilities, jeopardize client trust and reputation, or even lead to a cyber attack. Additionally, if an employee inadvertently shares internal information, it might give competitors an unintended advantage or expose the firm to potential legal or financial risks.

In an era where knowledge is power, controlling and protecting that knowledge has never become more crucial. OSINT is a powerful tool and technique that can be leveraged against you without your knowledge or consent. Through taking the time to mind your shares, configure minor privacy settings on your device and applications you can protect yourself and your company from becoming an easy target.

As always, if you have questions about business cyber security RubinBrown remains available to answer questions or assist.

Published: 10/16/2023

_{^{Readers should not act upon information presented without individual professional consultation.}}

_{^{Any federal tax advice contained in this communication (including any attachments): (i) is intended for your use only; (ii) is based on the accuracy and completeness of the facts you have provided us; and (iii) may not be relied upon to avoid penalties.}}