2 min read

Data Scraping: Associated Security and Privacy Risks

Alina BÎZGĂ

May 05, 2021

Ad One product to protect all your devices, without slowing them down.
Free 90-day trial
Data Scraping: Associated Security and Privacy Risks

Web scraping, or data scraping, is the process of extracting and collecting data from websites. Today, data harvesting is mostly automated, relying on specific tools. On a much smaller scale, regular internet users often participate in data scraping. This manual process requires users to copy-paste the information into a locally stored document or file.

Businesses mainly use the automatic extraction of web data. It”s an efficient way to gather millions and even billions of data points for business intelligence, market research, generation of sales leads and price comparison.

The dark side of web scraping

The security risks of web scraping are endless, since malicious actors abuse the process of gathering publicly available data. Two recent illustrations of how data scraping has compromised user privacy are the Facebook and LinkedIn data leaks. Both incidents have been associated with data scraping, exposing over half a billion data entry points of users’ profile information. 

Check if your personal info has been stolen or made public on the internet with Bitdefender’s Digital Identity Protection tool. 

Data exposure and user privacy risks may extend in various ways because threat actors can design web scrapers with more nefarious functions to bypass target websites’ security, gathering more sensitive information from platform users.

Social media platforms are especially prone to criminal data scraping due to the high volume of personally identifiable information (PII) that users regularly share. Threat actors quickly exploit reckless social media behavior, scraping personal data from user profiles. This information includes full names, date of birth, location, email addresses, phone numbers, workplace, photos, and any other data they publicly submit on the platform.

This information is of particular interest to scammers, who used it to deploy phishing attacks via email, text and instant messaging. Moreover, cybercriminals can use scraped workplace data to target specific employees and compromise internal networks with crippling ransomware.

Additional security risks stem from poorly configured or unprotected databases containing publicly available user data. In recent years, billions of user datasets were accessed by unauthorized parties, further extending the pool of data breach victims fueling cybercriminal activity.

How can regular internet users protect against data scraping incidents

While some online platforms condone scraping their users’ data, protecting against it is a painstaking process. The existence of loopholes allows threat actors to filter and exfiltrate the private information of users. One of the best ways for users to protect against unwanted data exposure due to web harvesting is limiting the information they provide when setting up an account or profile.

Making smart and privacy-focused decisions by filtering the data social media users chose to make public can go a long way. It may not be a bulletproof solution, but narrowing down any publicly available information that can be combined and used in targeted attacks can spare users from further compromise. If you haven’t reviewed your account privacy setting since you’ve signed up on a platform, it”s a good idea to examine the settings. Start by not allowing anyone on the internet to view your associated email address, phone number and birth date.

tags


Author



Right now

Top posts

What is medical identity theft and how to protect against it

What is medical identity theft and how to protect against it

July 27, 2022

2 min read
Curious about Omegle? Here’s how the roulette-style chat platform can threaten your online privacy and security

Curious about Omegle? Here’s how the roulette-style chat platform can threaten your online privacy and security

July 07, 2022

5 min read
Identifying and Dealing with Online Bullying Is Not Impossible - School Presentation Inside

Identifying and Dealing with Online Bullying Is Not Impossible - School Presentation Inside

June 28, 2022

2 min read
Let’s Celebrate World Social Media Day by Improving Your Privacy and Security Online

Let’s Celebrate World Social Media Day by Improving Your Privacy and Security Online

June 28, 2022

3 min read
Bitdefender Reveals the Top Cyber Threats Faced by Consumers in 2021

Bitdefender Reveals the Top Cyber Threats Faced by Consumers in 2021

June 22, 2022

1 min read
Scam alert: Cybercrooks use shady investment domain to scam keen investors out of money and data

Scam alert: Cybercrooks use shady investment domain to scam keen investors out of money and data

May 24, 2022

3 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

Marketing lists for crypto customers stolen in data breach at marketing platform Klaviyo Marketing lists for crypto customers stolen in data breach at marketing platform Klaviyo
Alina BÎZGĂ

August 09, 2022

2 min read
What is medical identity theft and how to protect against it What is medical identity theft and how to protect against it
Alina BÎZGĂ

July 27, 2022

2 min read
SSNs, drivers’ licenses and government IDs exposed in Oklahoma City Housing Authority data breach SSNs, drivers’ licenses and government IDs exposed in Oklahoma City Housing Authority data breach
Alina BÎZGĂ

July 26, 2022

1 min read