Don’t let dormant accounts become a doorway for cybercriminals

The report is a security advisory highlighting the risks posed by dormant online accounts, which are more susceptible to account takeover via infostealers, data breaches, credential stuffing, and brute-force attacks; it references incidents like Colonial Pipeline and the London Borough of Hackney as cautionary examples. It recommends auditing and deleting inactive accounts, using unique passwords and password managers, enabling two-factor authentication, avoiding public Wi‑Fi without a VPN, staying alert to phishing, and reviewing deletion policies to better protect personal and organizational security.