The Invisible Attack Surface: Your Personal Digital Footprint

Every organisation invests in firewalls, endpoint detection, and security operations centres. But there is a perimeter that almost every corporate security programme ignores entirely: the personal digital life of its most senior people.

What Constitutes Your Digital Footprint

• All personal email accounts, including legacy addresses created decades ago
• Social media profiles — both active and dormant
• Data broker records that aggregate your addresses, family members, property ownership, and more
• All devices connected to your home network
• Old accounts on services that have since suffered breaches

The Data Broker Ecosystem

Hundreds of companies legally aggregate and sell personal information scraped from public records, social media, and commercial transactions. This data is freely purchasable for as little as a few dollars — and is the foundation upon which targeted attacks are constructed.

The Home Network as Attack Vector

Consumer routers frequently run outdated firmware, expose administrative interfaces to the internet, and use default credentials that are publicly documented. When a senior executive connects their corporate laptop to a compromised home router, the physical security of their office becomes irrelevant.

Minimisation as Defence

The most effective mitigation is footprint minimisation: systematically identifying and removing your data from broker databases, hardening home network infrastructure, auditing and closing dormant accounts, and ensuring family members practise basic digital hygiene.