Last week I decided to OSINT myself. You know, just a quick Google search to see what's out there.
Three hours later, I was in the fetal position questioning every life decision I've ever made.
The Innocent Beginning
It started simple enough. I typed my full name into Google. "How bad could it be?" I thought. I'm a relatively private person. I don't post much on social media.
Oh, sweet summer child.
The First Red Flag
Page one of Google results: My address. Just... right there. On a data broker site I'd never heard of. Along with:
- My age
- Previous addresses going back 15 years
- Names of family members
- An estimated income range
I hadn't given this website permission to exist, let alone publish my life story.
Down the Rabbit Hole
Then I made a mistake. I searched my phone number.
Turns out, my number is connected to:
- Three social media accounts I forgot existed
- A food delivery app that exposed my order history
- My WhatsApp profile photo (which I thought was private)
- A comment I left on a news article in 2019
The Username Problem
I use the same username everywhere. I thought this was convenient. It is. For anyone trying to find me.
Searching my username revealed accounts on:
- Gaming forums from 2012
- A Reddit account I definitely want to forget
- An old dating profile (sorry, spouse)
- A cryptocurrency forum where I asked a very stupid question in 2017
The Photo That Haunted Me
Reverse image searching my LinkedIn photo found it on:
- A website scraping professional headshots
- A random slide deck on SlideShare
- A cached version of a company page I left 5 years ago
What I Did About It
After the initial panic subsided, I got to work:
Opted out of data brokers - Tedious but necessary. Each site has its own removal process.
Locked down social media - Made everything private. Reviewed every app permission.
Changed usernames - Different username for different purposes now.
Set up alerts - Google Alerts for my name so I know when new stuff appears.
Regular OSINT audits - Tools like CloudSINT help automate some of this discovery process.
The Uncomfortable Truth
Here's what I learned: Privacy isn't a setting you enable once. It's an ongoing battle.
Every account you create, every photo you post, every form you fill out - it all becomes part of your digital shadow. And that shadow is way bigger than you think.
Your Turn
Before you close this tab and forget about it, I challenge you:
- Google your full name (in quotes)
- Search your phone number
- Look up your most common username
You might be surprised. Or horrified. Probably both.
At least now you know.
Want to learn more about protecting your digital privacy? Join the CloudSINT Discord where we share OSINT techniques and privacy tools.
Top comments (0)