A month ago, I woke up in a cold sweat after having a nightmare. In my dream, I received a manilla envelope at my house, full of personal pictures from childhood through a recent vacation. The photos were of myself, my family, even the inside of my house. As the dream evolved, I came to realize I was being stalked by a sociopathic killer, and right before I woke up, I realized the stalker was using social media sites like MySpace, Facebook, YouTube, Flickr and Twitter to create an accurate personal history, including the photos. My wife and I readily agreed it would make a great movie, entitled something like MyFace or SpaceBook.
Fast forward a week and I was asked by Visibility Magazine to create an article for their upcoming issue. I suggested exploring the balance between sharing personal information and marketing yourself with the need for privacy and security. They liked the idea and I started doing research. It didn't take long for me to uncover a few hairy stories involving identity theft and fraud, perpetrated via social media. In one case, a hacker was able to access a friend's bank account using MySpace information. In another case, a soldier stationed in Iraq had his bank account repeatedly accessed, using information available on Facebook. The bottom line: the problem is real, and it's going to get worse before it gets better.
Part of my research included talking to the folks at Identity Experts here in Portland...a very sharp group of folks that can help individuals fight identity theft and repair their ID quickly. One of the greatest insights is that many of your backup password verification questions are answered in your social media profiles (dog name, child or mother's name, birthday, etc.). They recommend changing answers to verification questions like "What is my favorite color?" to another random password that only you would know. For more tips and tricks, visit my blog post and look for the January issue of Visibility Magazine for a more comprehensive article.
The second component of my research was to ask the same question to my network on LinkedIn. Within 24 hours or so, I receive 14 responses. Only one stated "Social media isn't a threat to your identity" while the rest agreed it was a minor, if not major issue. As outlined in my blog post, there are a few reasons this is a problem worth noting and addressing:
-social media sites typically generate revenue based on the amount of information they have about their members, which means they encourage the sharing of private and sensitive information
-these same sites have lax privacy policies and may be suseptible to hackers accessing and compromising user data
-the government is not currently creating or enforcing standards in this arena
-there is still a general lack of knowledge or concern from the public regarding the information they share, who is seeing it and what is done with it
While I'm not a proponent of dropping out of social media because someone might steal your identity or send you photos in an unmarked envelope, you should be taking steps to protect personal information. A few tips from my blog post and article are below:
* Consider unique user names & passwords for each profile
* Avoid listing the following information publicly: date of birth, hometown, home address, year of high school or college graduation, primary email address
* Watch where you post and what you say, as it can be used against you later.
* Google yourself regularly and monitor your credit
If you are not actively managing your profile in social media, someone will do it for you. You've seen the Citibank credit card ads with the voiceover talent extolling the virtue of identity theft; don't become one of them.