Most of what leaks about your business never leaked from your business.
Stolen credentials can circulate before an organisation realises it has been exposed. LANTEK's dark web monitoring capability helps identify compromised company email addresses, passwords and leaked data so risks can be investigated and addressed before they develop into wider security incidents.
Findings reviewed by LANTEK security professionals and explained in plain language.
Recurring monitoring capability, with a separate once-off scan used in the free health check.
Earlier awareness of exposed credentials and a clear containment path.
What is dark web monitoring?
Dark web monitoring is a continuous search of the marketplaces, forums and data dumps where stolen and leaked information is traded, looking for your company domain, your staff email addresses, the passwords attached to them, and customer records belonging to you. When something matching your business appears, you are alerted with the detail of what was found and where.
What does it actually find?
A typical result for a twenty to fifty person South African business is several staff email addresses with associated passwords from historical breaches at other organisations, at least one of which is usually still in use somewhere. It also commonly finds addresses belonging to people who left years ago, on accounts nobody ever disabled. The second finding is often the more serious one.
Why does a leak somewhere else put us at risk?
Because people reuse passwords. An attacker who buys a leaked password tied to a work email address will try it against your Microsoft 365 tenant, your remote access and your banking portal. Industry reporting consistently finds that a large share of successful intrusions involve an attacker simply signing in with a valid password rather than breaking anything.
That is also why multi-factor authentication matters so much, and why it is not sufficient on its own. See the session hijack walkthrough for what happens when an attacker gets past it.
What can dark web monitoring not do?
Dark web monitoring cannot remove your data from anywhere. Once information has been traded it is permanently out, and any provider offering to delete it is misrepresenting what is possible. It also does not scan or protect your systems. It is an early warning that specific credentials are compromised, which lets you change them before somebody uses them.
What should you do when something is found?
Change the affected password immediately, everywhere that person has used it, not only on the system named in the alert. Confirm multi-factor authentication is enforced on that account. Check the account for sign ins you do not recognise. Then disable any account belonging to somebody who has left. LANTEK does this work as part of a service plan rather than sending you a list.
Before you call
Is dark web monitoring included in the service plans?
Can we see what is out there before committing to anything?
Will it find our customers’ data as well as our staff logins?
A free dark web scan
and thirty minutes.
We scan for your company email addresses, passwords and customer data in the places stolen and leaked data gets traded, then spend thirty minutes walking you through what came back and what it actually means. No pressure, no jargon, no obligation. You keep the report either way.
Worried about what it takes to move?
Changing IT provider is the single biggest reason businesses stay somewhere they have outgrown. We plan the move around your working week, and we help carry the cost of getting across. Ask us how that works when we speak.