Top Reasons Not to Overshare on Social Media
1. You’re Feeding the Phishers
Cybercriminals love social media. Every birthday post, job update, or “new puppy named Rex” gives them ammunition for phishing emails and social engineering attacks.
“Hi Stu, hope Rex is settling in! Click here to confirm your pet insurance…”
2. You’re Building a Blueprint for Attack
Details like your job title, workplace, travel plans, or tech stack can help attackers craft targeted attacks—especially spear phishing or business email compromise.
“CFO on holiday? Perfect time to spoof an urgent invoice request.”
3. You Can’t Un-ring the Bell
Once it’s out there, it’s out there. Even if you delete a post, screenshots and cached versions can live on. Oversharing today can come back to haunt you tomorrow—especially during job changes or legal disputes.
4. You Might Be Violating Company Policy
Many organisations have social media policies that restrict what can be shared about internal systems, clients, or projects. A casual post about “that nightmare with the firewall config” could breach confidentiality.
5. You’re Creating a Social Engineering Toolkit
Attackers can use your posts to impersonate you or manipulate your colleagues. That “fun team lunch” selfie? Now they know who’s in your department and what tools you use.
6. You’re Inviting Identity Theft
Publicly sharing your full name, location, birthday, and even pet names (hello, password recovery questions!) makes it easier for attackers to impersonate you or crack your accounts.
7. You’re Fuelling Deepfake & AI Threats
Photos, videos, and voice clips can be scraped and used to train AI models for impersonation. That funny TikTok might one day become the voice of a scam call.
🛡️ Smart Sharing Tips
- Think before you post: Would you be comfortable with a stranger, your boss, or a hacker seeing this?
- Lock down your privacy settings: Limit who can see your posts and personal info.
- Avoid posting in real time: Especially when traveling or attending events.
- Don’t share sensitive work details: Even if it seems harmless.
- Use different info for password recovery: Don’t use publicly known facts.
