Video: Stealing identities on the street is easy

Filed Under: Data loss, Video

Many of us are concerned about how well companies and organisations are protecting our personally identifiable information - but how good at we at protecting our own details, such as name, date of birth and email address?

Carole Theriault and I decided to find out, so we took a video camera out onto the streets of Bristol and conducted a Vox Pop, asking people what they thought about identity theft - and also seeing if we could get them to tell complete strangers their personal information.

(Enjoy this video? You can check out more on the SophosLabs YouTube channel and subscribe if you like)

There were some interesting points we noticed:

  • First of all, we had no problems at all getting people to talk to us on camera. 80% of people were happy to stop and chat to us. This surprised us - we thought it would be much more difficult to get the British public (maybe they're not as shy and retiring as we imagined?) to participate. In fact, we think the fact that we were carrying a TV camera might have helped us. Could society's desire for "15 seconds of fame" actually be a god send for identity thieves?
  • Also, only one person refused to give us any personal information at all. Everyone else at least gave us their name, and most gave us their date of birth and email address too. Our feeling was that if we had engineered our questions and spent more time with each "victim" we could have probably ascertained their address ("we'd like to send you a copy of the video once it's finished..") and the name of their bank/telephone provider too.
  • Let's not forget - this video was made at the end of National Identity Fraud Prevention Week, suggesting that the campaign to raise awareness has not been that successful.
  • We were quite impressed that everyone had heard of the term "identity theft" though. There's a high awareness of the phrase at the very least, and although we were expecting some interviewees to look baffled by the term no-one did.
  • It was really encouraging that some of the people who participated in the survey realised what we were up to, although some clearly didn't want to cause a scene and so only jokingly expressed their concern after sharing some of their details.
  • Finally, from our unscientific poll, it appears that many people have not considered what companies are doing - if anything - to protect the data about individuals from leaking out.

Vox Pop interview

It's not just a personal problem of course - businesses and organisations also have a responsibility to look after sensitive information and ensure it isn't exposed and doesn't fall into the wrong hands. Sophos can help you by providing encryption technology and now we've also integrated the ability to scan for sensitive data into our desktop anti-virus and email protection - so you don't need to deploy and manage a separate product.

Pretty cool, eh?

Thanks to everyone who took part in the video - we couldn't have done it without you.

, , ,

You might like

One Response to Video: Stealing identities on the street is easy

  1. webmaestro ยท 1406 days ago

    The best security starts with just one word - Awareness. It also requires alertness and wariness - similar but not identical to awareness. It's amazing how blasé people can be however, even when well aware of the potential dangers of divulging (too much) personal info.

    This video demonstrates that, sadly, there are people out there who would happily spend 5 minutes locking their front door securely whilst blithely ignoring the fact that they've left the back door open or the key to it under the mat!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog at, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Follow him on Twitter at @gcluley