A recent study done by Princeton University was a wake-up call about the risks of recycling a mobile phone number without properly cleaning up its digital tracks.
The study looked at 259 mobile numbers listed as available by T-Mobile and Verizon. It found that 171 of them were still connected to popular online accounts like Amazon and PayPal. This means that a hacker could potentially obtain that number and use it to breach those accounts.
The study also found that 100 of the 259 numbers were linked to login credentials that had been leaked online. This made it even easier for someone to use that number to do a password reset to get into an account.
Mobile devices play an important role in cybersecurity because they handle a lot of the same types of data as other devices through the use of apps and online cloud tools.
They are also used to do password resets and receive multi-factor authentication codes. Some accounts will even allow you to use your mobile number to log in.
Just think about the types of text messages you receive to your cell number that could be used to gain personally identifiable information (PII):
- Prescription refill notices
- Shipping and delivery confirmations
- Online banking alerts
- MFA codes
- Payment receipts
- Doctor appointment reminders
If you have not properly disconnected your mobile phone number from other parts of your online or offline life, your number could be used against you for identity theft, account takeover, credit card fraud, phishing of your friends and family and other types of identity-based crimes.
How to Clean Up Your Cell Number’s Digital Footprints
Update Your Mobile Number for All SaaS Accounts
Go through all the SaaS (Software as a Service) accounts that you have and update your cell number. The average person uses 36 cloud services each day between work and personal. You may have more than you realize!
As you log into each of your accounts, make sure that you check your contact details and update the account from your old cell number to your new one. It is also a good idea to double-check that the new number is properly reflected the next time that you log into the account.
Update Your Mobile Number for Online Retailers & Other Sites
You will want to update your mobile number for any online retailers that you have shopped with and other online sites that you use.
If shipping notices are still coming to your old mobile phone from an online retailer, that can alert a criminal as to when to swing by for a pickup from your porch.
Think about all of the sites where you do online shopping. Make sure to include those that you shop from only around the holidays and other sites you may use from time to time (like a trade convention website). Make sure that your number is updated.
Call Local Service Providers to Update Your Number
Local service providers often send text messages for things like notification of a service appointment or a payment confirmation.
Call any providers that you work with (such as an IT provider, HVAC service provider, hair salon, etc.) and update your number with them as well.
It may seem like a criminal couldn’t gain much from knowing when you’re getting your next haircut. However, clever phishing scammers can use this information over social media to trick your friends and family.
For example, a scammer could see that you had a haircut appointment on Tuesday and then reach out in a few days to someone you’re connected with on social media. They may say, “I just saw Jan at the salon on Tuesday and she told me to reach out to you...” Just having that one piece of real information makes a scam more believable.
Review Past SMS History for Any Accounts You May Have Missed
There could easily be a few accounts that you may have missed. You should review your past SMS history to look for any text messages from online accounts or cloud tools that you may have forgotten about.
Double Check All MFA Prompts
Multi-factor authentication is one of the best defenses against having your account breached. However, that code often comes to a cell number as a text message. You don’t want to risk your online banking account being accessed by a hacker. Double-check all of your MFA code prompts after you change the number.
The time spent double-checking that the code is now coming to your new phone number is well worth it to ensure a criminal doesn’t breach one of those accounts.
Does Your Business Need Help With Mobile Device Security?
Mobile devices can leave a company at risk if they’re not properly managed and secured. Sound Computers can help your Connecticut business with an effective mobile device management strategy.
Contact us today to schedule a free consultation. Call 860-577-8060 or reach us online.