Your Profile Is a Dossier. Here's Who's Reading It.

This article explains how attackers use publicly available information—LinkedIn posts, corporate directories, breach databases, photos, and even short audio clips—to build dossiers for targeted phishing, identity theft, and deepfake voice scams. It cites real examples (a targeted phishing incident, a catfishing job applicant, and the ShinyHunters breach of Instructure) and recommends practical mitigations such as treating security questions like passwords, freezing children's credit, creating family safe words, auditing public information, and using security awareness training to simulate OSINT-based attacks.