Public explainers
What criminals do with leaked data
These guides explain the scams that follow a breach, in plain language. They do not replace official notices. They do not guess unpublished numbers.
Why leaked data is useful to criminals
A data breach is not only a password problem. The details that leak are what make the next message or phone call look official.
Read this guide
Phishing that already knows you
After a leak, the dangerous message is the one that sounds informed. Names, addresses, contract numbers and loyalty IDs are the raw material.
Read this guide
What an IBAN leak lets someone do
An IBAN in a stolen file is not a PIN. It is still dangerous, because it lets a stranger talk about your bank account as if they already belong in the conversation.
Read this guide
When the leaked file is a government one
A message that sounds like the tax office, the identity-document service or the police is easier to believe. That is why those files are valuable to scammers.
Read this guide
Health, school, and why leaked data ages badly
Some leaks look small because they are not passwords. Contact details, absences, and records tied to health or school stay useful to criminals for a long time.
Read this guide
When a machine writes the scam
Language models do not understand you. They predict the next word. That is already enough to write fluent, personal-sounding messages at a scale no call centre can match, especially once a leak has supplied the facts.
Read this guide
Passwords, passkeys, and what to change after a leak
A leaked password is useful because people reuse it. A hash is still a reason to change it. A passkey is harder to phish than a code sent by SMS.
Read this guide