FAQ: Dark Web

The surface web comprises of websites that are indexed (or catalogued) by search engines.

The dark web is a hidden layer of the internet that is not accessible or indexed by search engines, and requires specific software for access. This area is popular with criminals because they can remain anonymous and untraceable as they communicate. The dark web is a huge marketplace where hackers and thieves exchange information, goods and services; information exposed from data breaches, hacking incidents, or leaked information can be bought and sold on the dark web as "lists" by identity thieves. Information traded on the dark web may be old or could even re-appear several months, or years following exposure of your personal information. The dark web forms a small part of the deep web.

The dark web is accessible only if you download a special open-source browser software. Such software typically uses encryption technology to help users maintain their anonymity online. It does this, in part, by routing connections through servers around the world, making them much harder to track.

You do not need to be on the dark web for your information to end up there. Information stolen or exposed in data breaches or hacking incidents, or leaked information can be bought and sold on the dark web as "lists" by identity thieves. This information may be old or could even re-appear several months, or years following exposure of the information.

"Exposed" information does not necessarily mean that your account(s) have been hacked. You can be proactive and take several actions to help protect yourself. Change your password for the site/service mentioned in the notification. In addition, if you use the same password for numerous online accounts, make sure you change these passwords as well. Enable two-factor authentication whenever offered by a site or service. Visit our Dark Web Monitoring Support Article for a full list of helpful tips and guidance.

Even though you may have unsubscribed from a website or may have deactivated your account, your data may still be present in their data systems and could be exposed during a data breach, a hacking incident, or another type of data leak.