thegeekprofessor

Huge load of crap. They're using buzzwords to sell fear and find a place in your wallet. I would say there's some truth to it, but it's mostly marketing BS.

Mostly having your data easily available. How many website profiles did you list your birthday for example? Have you frozen your credit reports? Have you opted-out on the major data broker (LexisNexis for example). On that last one, check out this site (it's a great way to get started): https://www.stopdatamining.me/opt-out-list/

If you just opted out on the top 10, you'd be way better off than most.

Starting with your last question, there are numerous guides that I wouldn't be able to add a lot to because I focus more on prevention. In short, report it to the FTC (https://www.identitytheft.gov/) and your police. Get reports that you can use for proof for when you dispute the accounts/charges/accounts.

For your first question, the best answer is to develop a mindset of data protection at all times going forward. In other words learn to be a data miser. A quick summary is to always resist attempts to put your information in a computer system. Don't let your dentist have your SSN without a fight. Don't let them have your real birthday without asking why they need it and asking if it's required.

I have an 8 minute video that explains more here:

https://www.youtube.com/watch?v=e_QINj-tU8Y

Also an article here (though I need to update it so please ask follow-on questions or leave comments there if you'd like): http://www.thegeekprofessor.com/guides/privacy/data-defense/

I'm planning on rebuilding those as paid courses soon so get them now while you can :)

The "they'd get it anyway" argument is popular, but think it through... it assumes that all people have the same level of intent. Someone can easily go through your trash, but might not be able to get your email or have the time, skill, etc. to recover your mail if it's been shredded.

The idea is to balance how much work you make it for THEM compared to how much work it is for YOU. Shredding isn't particularly hard or time consuming so it's a good idea. A lazy-man's approach is to rip unwanted mail in half and throw away each half in different loads. That way if they have half an application, they can't do this: http://cockeyed.com/citizen/creditcard/application.shtml

Point is that trash isn't your biggest threat, but shredding or doing SOMETHING to your more sensitive papers isn't hard either so it's usually well worth it.

Social engineering is the most powerful form of attack because people who aren't prepared for it are easy to fool. That's why "THIS IS THE IRS AND YOU OWE US MONEY SO PAY UP" phone calls work. It's critically important that people learn to doubt emails, phone calls, and other forms of communication until they can verify the source and information.

Biggest tip: always be suspicious if someone reaches out to you and makes you feel an emotion like fear, greed, etc. The point of social engineering is they can't do something without YOUR help so if you don't do what they ask, you win.