19 Mar 2024

Cybersecurity

Think twice before sharing your email address


Share this article

We all know the drill — signing up for a new service or product and being asked to provide an email address. It is such a common request that we often do not think twice about it. However, did you know that giving out your email address indiscriminately can be dangerous?

Your email address can serve as a digital breadcrumb for perpetrators or advertisers to track your activity across various sites and send you targeted advertisements — some of which could turn out to be malicious.

The dangers of giving out your email

Your email address contains a treasure trove of information about you. When you share it with an organisation, you are potentially entrusting them with your personal data, including your name, address, phone number, and other identifying information.

This raise concerns over data privacy as it exposes you to the risk of becoming a victim of cyber-attacks. According to Surfshark, in the first quarter of 2022 alone, over 18 million email accounts were breached worldwide.

Perpetrators can use your personal details to invade your digital privacy and commit phishing scams, identity theft, or even sell it on the dark web, resulting in severe financial losses and damage to your reputation. As cyberattacks intensify globally, it is crucial to remain vigilant to stay safe in the digital world.

Did you know… Based on a research by Blackcloak, online data brokers maintain more than three personal email addresses for each of their executive-level customers, and 95% of the executives’ profiles contained personal information about their family and relatives.

However, data brokers themselves are susceptible to cyberattacks. In 2021, data broker LimeLeads was hacked, resulting in the exposure of approximately 50 million business contacts on the dark web. Such data leaks exemplify the risks of mass scraping conducted by the data broker market.

How new methods of user tracking may infringe your data privacy

New ad targeting techniques have emerged to bypass traditional methods of user tracking, such as cookies and invisible trackers. Below are some examples of common tracking techniques:



The Unified ID 2.0 (UID 2.0) converts your email address into a unique token that travels with your account across various platforms. This enables advertisers to show you ads based on your previous activity. For example, if you shopped on a sneaker website that uses UID 2.0 and you keyed in your email address, when you log in to a streaming app that also uses UID 2.0 thereafter, the two accounts can be linked based on the token.



Websites and apps can track your activity through your email address by uploading it to an advertising broker’s database which contains detailed profiles of users’ interests based on their browsing activity. This raises privacy concerns as users may not be aware of the extent of their data being collected and used by advertisers or third parties. The data could possibly be used for malicious purposes such as identity theft or financial fraud if it falls into the wrong hands.

What precautionary measure should you adopt

To avoid being a prime target for perpetrators, here are a few simple steps to keep your online identity secure:

Do not submit company email address for non-business usage

 

For personal accounts create multiple email addresses for different services

 

Utilise email-masking tools (if available)

 

Opt out of UID 2.0 ad targeting via the Transparent Advertising Portal

Think about the potential risks before you hit that "submit" button. That’s how you can stay safe in the digital world!


For most of us, mobile phones and laptops are an extension of ourselves – whether it’s for work, leisure or to keep connected with our family and friends. 

Despite protective technologies and systems in place, people remain the weakest link as many fall prey to increasingly sophisticated cybercrimes. 

Read on as our IHiS cybersecurity experts share how you can tighten online security, and what we do to inculcate a cyber-resilient culture within the organisation. 

 

Cecilia Leng
IHiS Assistant Manager, Chief Risk Office


“Personal devices often lack critical cybersecurity protection and people have been connecting their own devices to their organisations’ networks. This could serve as entry points for attacks through unpatched vulnerabilities and may result in devastating consequences if compromised. Therefore, do ensure that you secure your accounts with strong passwords and patch your devices regularly, whenever you receive the notification!”

 

See Chay Meng
IHiS Assistant Director, AIC, CISO Office


“Multiple layers of defences we’ve put in place might give people a false sense of security. The human element is always the biggest risk, which is why AIC CISO Office has a strong focus on our awareness programme – this is necessary to strengthen the last line of defence – our colleagues.

One tip for everyone is to remember PTA - Pause, Think before you Act before you click on any links, attachments or provide personal information!”

 

Moon Chung
IHiS Manager, NUHS CIO Office


“Keeping cybersecurity in mind is a key part in protecting ourselves and the organisation from becoming victims of cybercrime. With reinforcement learning, we can together build a culture of cybersecurity in both workplace and personal lives of our peers. Always be vigilant and stay prepared in case of a cyber attack.”

 

Wan Jia Hui
IHiS Senior Manager, SingHealth CIO/CISO 
 

“Phishing emails are getting more sophisticated – gone are the days where they are peppered with typos and grammatical errors. We need to learn and relearn scammers’ new “tricks” and slow down to be more cautious. While this might seem counterintuitive in our fast-paced environment, it is necessary in order to keep our work and loved ones safe from malicious actors.” 

 

Bernard Kiong
IHiS Senior Manager, Cyber Defence Group

“Based on sound polices, we establish foundational security baselines upon which we can build our cybersecurity defences. With new emerging threats that target medical devices and operating technology, cybersecurity is important to ensure that the public healthcare can continue to operate safely and confidently, without compromising on patient care.”

Are you interested to join us as a defender of Singapore’s public healthcare systems? Head over to our careers portal at to find out how! 

 

 

Related articles

X

By continuing to use and navigate this website, you consent to the use of cookies in accordance with our Privacy Policy.

Confirm