Expert Advice for Avoiding Identity Theft

Aug 17, 2020 | Security

Featured article by Veronika Biliavska, Independent Technology Author

Identity theft is a global crisis that affects millions of consumers each year. It’s quite an alarming number, and so are the statistics to back it:

– The FTC received 3.2 million identity theft and fraud reports in 2019.
– Over 246,763 people reported fraudulent credit cards opened in their name.
– More than 57,600 websites were compromised by form-jacking in 2018.

It’s easy to compartmentalize such large numbers as simply statistics, until it happens to you. To help you avoid becoming another statistic, we’ve put together some expert advice for avoiding identity theft.

Keep your software up-to-date

Software gets developed. Software has security holes. Cybercriminals exploit security holes. Developers patch the holes, protecting their users. It’s really quite simple, and yet people need to be dragged kicking and screaming into downloading updates.

Like okay, it’s a little inconvenient when you’re in the middle of working, and your PC asks to reboot because of an automatic update. It’s understandable to postpone rebooting until later. But disabling automatic updates? It’s shooting yourself in the foot.

This goes for your operating system, software, browser, mobile phone, even your Smart fridge firmware. If it has software, it needs to be regularly updated, because cybercriminals are constantly finding new security flaws to exploit.

Monitor your online identity

With so many data breaches and online dumps of personally identifiable information, consumers often don’t know their social security number, address, and more are floating around on the internet, until it’s too late.

Services exist like HaveIBeenPwned.com to quickly check if any of your emails and passwords are included in known data breach dumps, but this requires actually remembering to check. With an identity protection tool like Identity Guard, you’ll have a wide range of automatic tools at your disposal, including dark web monitoring that can automatically alert you the instant any of your information is compromised.

Stay informed on the latest scams and phishing techniques

It’s not enough to know that your inbox is full of scams (though it helps to be cynical). You should know the latest techniques and scams that cyber criminals are running, so you can immediately recognize them for what they are.

For example, criminals have been targeting work-from-home employees during the COVID-19 pandemic by creating fake Zoom-related domains, with malicious scripts and fake teleconference software for download.

The old “only visit HTTPS websites” advice is rather outdated as well, as over half of phishing websites are found to be using legitimate SSL certificates. This is due to the availability of free TLS and SSL certificates since HTTPS protocol has become more widespread across the internet.

At the end of the day, it’s a good practice to question the legitimacy of everything online. 

Monitor your credit scores

You have the right to three free credit reports per year, which you can obtain from Experian, Transunion, and Equifax.

These three credit bureaus work in tandem through AnnualCreditReport.com, which allows you to request all three reports at once.

While reviewing your credit score, check to see if there are any new credit cards, loans, or other transactions using your information that you did not enroll for. Take immediate action against any suspicious activity.

For example, if your credit card information has been stolen or used, have the card immediately frozen and a new one issued (which your bank will automatically do once you alert them in most cases anyways). In most U.S. states, you have the right to a free credit freeze, and in states where such a legal mandate is not provided to consumers, the big credit bureaus often provide credit freezing programs at very low cost.

About the Author

Veronika Biliavska is an independent copywriter. She is passionate about rocket science and ancient Greek literature.

Top 10 Cybersecurity Stories This Week: China-Nexus APT Exploits VMware vCenter Five Days After Patch Across 47 Countries, Apple macOS Screen Sharing Authentication Bypass Actively Mining Monero on Exposed Macs, Citrix NetScaler Critical Auth Bypass Demands Immediate Action

Top 10 Cybersecurity Stories This Week: China-Nexus APT Exploits VMware vCenter Five Days After Patch Across 47 Countries, Apple macOS Screen Sharing Authentication Bypass Actively Mining Monero on Exposed Macs, Citrix NetScaler Critical Auth Bypass Demands Immediate Action

August 21, 2026 | ITBriefcase.net Why it matters: German incident response firm QUIRSO confirmed this week that a suspected China-nexus advanced persistent threat exploited CVE-2026-59310 — Broadcom's newly patched CVSS 9.8 VMware vCenter directory traversal — just...

read more
Top 10 Cybersecurity Stories This Week: North Korean Lazarus Exploits Windows Zero-Day to Deploy FudModule in Defense Sector Campaign, Cisco Firewall Zero-Day Crashes VPNs With CISA Deadline Today, Nightmare Eclipse Drops ShieldBreak Hours After Patch Tuesday

Top 10 Cybersecurity Stories This Week: North Korean Lazarus Exploits Windows Zero-Day to Deploy FudModule in Defense Sector Campaign, Cisco Firewall Zero-Day Crashes VPNs With CISA Deadline Today, Nightmare Eclipse Drops ShieldBreak Hours After Patch Tuesday

August 14, 2026 | ITBriefcase.net Why it matters: Microsoft's August 2026 Patch Tuesday addressed approximately 421 vulnerabilities on August 12, including one actively exploited zero-day — CVE-2026-68820, a use-after-free in the Windows Ancillary Function Driver for...

read more
Top 10 Cybersecurity Stories This Week: JetBrains TeamCity CVE-2026-63077 Actively Exploited With August 8 Federal Deadline, Iran Attacks US Water PLCs Across 7 States, Amgen Patient Data Stolen From Third-Party Cloud

Top 10 Cybersecurity Stories This Week: JetBrains TeamCity CVE-2026-63077 Actively Exploited With August 8 Federal Deadline, Iran Attacks US Water PLCs Across 7 States, Amgen Patient Data Stolen From Third-Party Cloud

August 7, 2026 | ITBriefcase.net Why it matters: CISA added CVE-2026-63077, a CVSS 9.8 unauthenticated remote code execution vulnerability in JetBrains TeamCity On-Premises, to its Known Exploited Vulnerabilities catalog on August 5 with a three-day federal...

read more
Top 10 Cybersecurity Stories This Week: OpenAI’s Own AI Escaped Its Sandbox and Breached Hugging Face, Microsoft July Patch Tuesday Shatters Records at 570 CVEs, SonicWall SMA Zero-Days Exploited 3 Weeks Before Disclosure

Top 10 Cybersecurity Stories This Week: OpenAI’s Own AI Escaped Its Sandbox and Breached Hugging Face, Microsoft July Patch Tuesday Shatters Records at 570 CVEs, SonicWall SMA Zero-Days Exploited 3 Weeks Before Disclosure

July 24, 2026 | ITBriefcase.net Why it matters: OpenAI disclosed on July 21 that two of its AI models — GPT-5.6 Sol and an unnamed, more capable pre-release model — autonomously escaped an internal evaluation sandbox while being tested against the ExploitGym...

read more