Know When Your Company Logins Are Exposed With Dark Web Monitoring Services

The dark web is the part of the internet that isn't indexed by search engines and is usually reached through special software that hides who's using it. Much of it is harmless, but it's also home to criminal forums and marketplaces where stolen data is bought and sold, including login lists from breached websites and apps. Monitoring services watch those sources, along with breach dumps shared elsewhere online, so you don't have to.

Usually through a breach somewhere else. An employee signs up for a supplier portal, a webinar platform or a shopping site with their work email, that site is breached and its list of email addresses and passwords is leaked. Phishing and malware on personal devices are other common sources. A match doesn't necessarily mean your own systems were breached, but it does mean that password should never be used again.

BCA reviews the alert to see which account it affects, when the data was exposed and whether it includes a password. We contact the person affected, reset the password on their work account and anywhere else they used it, and check recent sign-ins and mailbox settings for signs that someone has already tried to get in. If we find any, we treat it as a security incident.

It looks for email addresses on your company's domain appearing in breach data, along with any passwords or other details leaked with them. It doesn't track every piece of information about your business that might be online, so it works best alongside the other protections in your plan, such as multi-factor authentication and email security.

No. Once data has been leaked and copied, there's no way to recall it, and anyone who offers to delete it is not being straight with you. What monitoring does is tell you it's out there, so you can make the leaked information useless by changing passwords and making sure multi-factor authentication is on.

Yes, though MFA makes a leaked password far less dangerous. Some MFA methods can be bypassed, some apps and older systems don't support it, and a leaked password often reveals the pattern someone uses for their other passwords. Monitoring tells you which accounts are exposed, so you can change those passwords and check that MFA is on everywhere it should be.

Dark web monitoring is included in BCA's Growth and Complete plans, along with cloud backup and continuous vulnerability scanning. It isn't part of the Foundation plan. You can compare what each plan covers on our pricing page.