Dark web research
We check whether data, access or plans of your company appear in criminal forums and marketplaces.
On the dark web, in closed forums and in messenger groups, stolen data, access to company networks and attack services are traded.
If you see early what is being offered about your company, you gain time before the damage occurs.
Threats to your company
- Stolen employee credentials, for example from data leaks at other services
- Sale of access to your network by specialised brokers
- Publication of stolen data after ransomware attacks
- Offers of customer data, credit cards, blueprints or internal documents
- Announcements of attacks, extortion or actions against your company or your executives
- Recruitment of insiders in your company
Typical problems
- Data leaks are often only noticed when customers or the media point them out.
- Doing your own research is risky: inexperienced searchers leave traces or commit offences.
- Findings must be assessed: genuine, old or fake? How big is the problem really?
- Without evidence, there is no basis for reports to authorities, insurers and those affected.
- The GDPR reporting deadline runs from the moment you become aware of the incident: 72 hours.
Financial consequences
- Attacks using purchased access: ransomware, data theft, fraud
- Double extortion: ransom for decryption and for not publishing
- Costs of reporting and notifying those affected, plus GDPR fines
- Damage claims from customers, including class actions
- Loss of trade secrets to competitors
- Reputational damage and share price losses for listed companies
Our approach
- Define the search: domains, brands, executives’ names, customer data, internal identifiers
- Research in forums, marketplaces, leak sites and closed channels – lawfully and without traces leading to your company
- Assessment of findings: authenticity, age, scope, impact
- Report with concrete recommendations: block access, inform those affected, involve authorities
- Ongoing monitoring with alerts on new findings, if required
A suspicion is best clarified early.
Tell us about your concern. We will get back to you personally and confidentially.