Employee Data Breaches detection

Name: Employee Data Breaches detection
Price range: $

Employees frequently use their business email to signup to platforms (e.g. social media).

Monitoring

149 € / quarterly
Single Test

349 €

Sample Images and Screenshots

Steps

Employees frequently use their corporate email addresses to sign up for social media platforms, cloud services, or other online tools. But what happens when one of these services is breached? Are corporate credentials falling into the wrong hands? Has your company already been affected by a data leak without your knowledge? To what extent has sensitive information already been compromised?

💡 PRIVACY OF sensitive information

We will provide you detailed information about breached employee data but remove sensitive information, e.g. the concrete passwords, or if registered on dating apps. We can provide you such information on your explicit order.

Step 1

Order

Just order this module and we will immediately start to search for breached employee data.

Step 2

Search for Employee Data

We will use breach Data Base to search for compromised employee data. You will get an data export in Excel.

Step 3

Follow-up

We will send you the raw data export and exclude sensitive information.

Step 4

Repeat (recommended)

We recommend to repeat this test semi-annually.

Request Your Custom Assessment

Sheet

Category

Awareness & Training, Security Test
Your internal effort (~)

20 min
Duration

2 days
Compliance & Accountability relevant?

✅
Applicable to/at

All domains used for eMails
EUSEC®-Module
- EUSEC®-Employee-Data-Breach-26A

Details

Key Outcomes (What you achieve)

Independent Validation: Breached Data is objectively assessed by top-tier experts.
Risk Reduction: Risks for your company are known and key measures are proposed.

Deliverables (What you receive)

Traceable Evidence: Documentation of your technical and organizational measures (TOMs)
Raw Data Export with visualisation: You will receive a list in spreadsheet format (e.g., Excel/CSV) for seamless further processing and analysis.

In-Scope

Search for Breached Data using breach data bases
If found, export data whereas possible in spreadsheet format (e.g., Excel/CSV)
- Passwords
- User names
- eMail adresses
- Postal addresses
- more details
- Breached origin or platform, whereas known
- Date of breach, whereas known
Redact sensitive information before providing the result to the customer
Give 3 recommendations by a top-tier cybersecurity principal

Out-of-Scope

Comprehensive PDF Report or use of other formats is optional (e.g. JSON or else)
Informing employees is available optionally (e.g. via eMail)
Create Tickets in your ticket management system (e.g. JIRA), instead of list / report based documentation (optional)
Onsite or observed testing (e.g. via online conference tools and screen sharing) is costly and offered optional.
Group/Corporate Entities: Corporate groups or companies with multiple subsidiaries may require a separate package for each (legal) entity.
Implementation of corrective actions (e.g. remove breached data from darknet oder databases).
General exclusion: Everything else not explicitly mentioned as In-Scope is strictly Out-of-Scope.