016 - Unused Accounts Can Become Security Risks

“Old online accounts you no longer use may still contain personal information. Delete unused accounts whenever possible, especially shopping sites, old forums, and apps connected to your email or social media.”

Out of Sight, Not Out of Danger: The Ghost Accounts Haunting You

Do you have old online accounts you've forgotten about? Those abandoned accounts can become a serious cybersecurity risk.

Think about that random online shoe store you bought from once in 2018, or the trendy fitness app you tried for a week and abandoned. You likely forgot they ever existed. But out there in the digital ether, those accounts are still sitting around, holding onto your full name, date of birth, home address, and maybe even an old credit card number.

These are your "ghost accounts," and they are a hacker’s favorite playground.

Why Unused Accounts Are an Easy Target

When you actively use a service—like your primary email or your main bank—you probably notice if the password changes or if a weird security alert pops up. But if a data breach hits an old forum or a shopping site you haven't logged into in five years, you won't notice when a cybercriminal quietly slips in through the back door.

Once inside, they don't just get the personal data stored in that specific account. If you happen to reuse passwords, they now have the skeleton key to try breaking into your current email, social media, or streaming profiles.

Your Digital Spring-Cleaning Plan

You don't need a degree in IT to exorcise these digital ghosts. You just need to spend a few minutes cleaning house using this simple routine:

• Audit Your Inbox: Open your email and search for words like "Welcome," "Your account," or "Verify your email." This will instantly reveal dozens of apps and websites you signed up for years ago and completely forgot about.

• Delete, Don't Just Delete the App: Removing an app from your phone's home screen doesn't delete your data from the company's servers. You need to log into the actual website, go to account settings, and look for "Close Account" or "Delete Account."

• Sever the Ties: Go to your current Google, Apple, or Facebook security settings and check "Connected Apps." If you see old games or services you no longer use, revoke their access immediately.

Taking fifteen minutes to clear out the digital clutter today means giving hackers one less doorway into your life tomorrow.

What Now

If you have realized that your digital footprint is cluttered with "ghost accounts" or old online profiles you no longer use, taking proactive steps to eliminate them reduces your risk of identity theft from future data breaches. Grounded in digital safety frameworks from leading consumer advocacy and cybersecurity non-profits like the National Cybersecurity Alliance and the Electronic Frontier Foundation, follow this cleanup checklist:

1. Conduct a Profile Audit: Search your primary email inboxes for confirmation keywords like "Welcome," "Verify your account," or "Your registration" to locate forgotten accounts. You can also review saved credentials in your internet browser or password manager to track down websites you haven't visited in years.

2. Request Permanent Account Deletion: Do not just delete the app from your phone or stop visiting the website. Log into the service, navigate to the privacy or account settings, and look for options like "Close Account," "Delete Data," or "Terminate Account" to ensure your personal information is removed from the company's active database.

3. Revoke Connected App Permissions: Access the security settings of your major "gatekeeper" accounts—such as Google, Apple, Microsoft, and Facebook. Review the list of third-party apps or games that have permission to log in using those credentials, and immediately revoke access for any service you no longer actively use.

4. Update Reused Passwords: If you discover that an old, abandoned account used a password you still rely on today for other active profiles, change those active passwords immediately. Transitioning to a unique, complex passphrase for every individual account guarantees that a data breach at one company cannot compromise the rest of your digital life.

5. Opt-Out of Data Brokers: Many unused accounts eventually have their underlying data sold to corporate data aggregators. Use free resources and privacy guides from digital rights organizations to systematically submit opt-out requests to major data broker websites, reducing the public availability of your background information.

Local Resources

1. TechConnect WA (Equity in Education Coalition)
   Website: https://eec-wa.org/digital-equity/
   (206) 538-6603

2. Technoactivism
   Website: Technoactivism
   Phone: Contact through website
   Provides digital safety education, privacy guidance, and practical technology assistance. Technoactivism can help individuals identify unnecessary online accounts, improve account security, and better understand their digital footprint.

3. The Arc of Southwest Washington
   Website: The Arc of Southwest Washington
   Phone: (360) 254-0706
   Supports individuals with intellectual and developmental disabilities and their families, helping them navigate services and maintain independence in an increasingly digital world.

4. Area Agency on Aging & Disabilities of Southwest Washington
   Website: AAADSW
   Phone: (360) 694-8144
   Assists older adults and people with disabilities in accessing services, benefits, and resources that often require managing online accounts safely and effectively.

5. Council for the Homeless
   Website: Council for the Homeless
   Phone: (360) 695-9677
   Helps vulnerable individuals and families access housing and support services, many of which depend on maintaining secure access to email accounts and online portals.

6. Share
   Website: Share Vancouver
   Phone: (360) 695-7658
   Provides support services for people experiencing housing instability, poverty, or life transitions, where maintaining control of personal information and online accounts can be critical.