Jordan Citizen
what a bad actor can assemble about you, and what to change
The face a stranger starts from
Rated High because one record holds your date of birth, a physical address and your phone together (rule R3).
The picture in one screen
One breached record holds your date of birth, address and phone together.
jordan.citizen@example.com
HighEmail, password (readable)
See the findings →jordan@citizen-landscapes.example
InfoRegistered
See the findings →+61 491 570 156
HighA family circle registered to your mobile
See the findings →Your personal email has been in circulation since at least 2016, when Dailymotion was breached. A readable password of yours sits in one list, indexed in September 2020. The records also carry your date of birth, an address and a phone number. 15 services hold a registration against your identifiers.
Checked — none
No breach or stealer-log record contains your work email in the sources checked.
jordan@citizen-landscapes.exampleNo stealer-log (malware) record contains your mobile in the sources checked.
+61 491 570 156What we looked for and did not find
Table of contents
How each finding was reached
From your personal email to your name and accounts
- Your identifierYour personal email jordan.citizen@example.com
- Live enrichmentRegistered to 8 services
- Breach recordsInside 6 breached data sets — a readable password in 1
- Public profileA public Strava profile discloses home and routine
- AssessmentOne record holds your date of birth, address and phone together — enough for identity fraud
From your work email to your name and accounts
- Your identifierYour work email jordan@citizen-landscapes.example
- Live enrichmentRegistered to 3 services
- AssessmentNothing beyond a name or handle — the registrations tell a stranger where a login would work
From your mobile to your name, location and accounts
- Your identifierYour mobile +61 491 570 156
- Live enrichmentRegistered to 4 services including a family-location app
- Network lookupHeld by 1 caller-ID or contact-list service
- Breach recordsInside 1 breached data set
- Location appOne login stands between a stranger and the live position of everyone in the circle
From your name to property, business and domain records
This layer — property and business records — is part of the Digital Footprint Review. It is not included in the Exposure Check.
From one identifier to the next — the cascade an investigator runs by hand
This layer — the human cascade — is part of the Digital Footprint Review. It is not included in the Exposure Check.
From your public profiles to your family and their home
This layer — family and associates — is part of the Protective Intelligence Report. It is not included in the Exposure Check.
Identifier trace maps
Each map starts with an identifier included in the agreed scope. Its tiles lead to the explanations in the next section.
Read this map as finding cards →
Read this map as finding cards →
What each finding means
jordan.citizen@example.com
personal email · 17 findings- What it is
- Online graphic-design tool
- Found
- Email, name, username jordanc_designs, password (scrambled)
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated Medium because your records carry scrambled passwords or contact details, not readable passwords (rule R7).
- What it is
- A dataset containing exposed records
- Found
- Email, password (readable)
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated High because a readable password of yours exists in an older list (rule R6).
- What it is
- Diet and calorie-tracking app
- Found
- Email, username jcitizen88, password (scrambled)
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated Medium because your records carry scrambled passwords or contact details, not readable passwords (rule R7).
- What it is
- Video-sharing platform
- Found
- Email, username jordan_c_88, no password
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated Low because the records found carry your email alone or are recycled lists (rule R9).
- What it is
- Australian online marketplace
- Found
- Email, name, phone, address, date of birth, no password
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated High because one record holds your date of birth, a physical address and your phone together (rule R3).
A07 — Check the recovery phone, recovery email and recent sign-ins on jordan.citizen@example.com
A12 — Your date of birth and address cannot be changed — fortify around them
A13 — Treat calls or messages that already know your name, birthday or old number with suspicion
- What it is
- Australian bookseller
- Found
- Email, name, phone, date of birth, membership ID, no password
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated Medium because your records carry scrambled passwords or contact details, not readable passwords (rule R7).
A07 — Check the recovery phone, recovery email and recent sign-ins on jordan.citizen@example.com
A12 — Your date of birth and address cannot be changed — fortify around them
A13 — Treat calls or messages that already know your name, birthday or old number with suspicion
- What it is
- Cloud file storage
- Found
- Registered as “Jordan C”
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Music streaming
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Microsoft account — Windows, Office, Outlook and Xbox sign-in
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Creative-software account (Photoshop, Acrobat)
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Photo and video sharing (Meta)
- Found
- Username jordan.citizen
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Language-learning app — profiles are public by default
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Image-sharing social network
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Video meetings
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Activity-tracking social network — runs and rides with maps
- Found
- Public profile; discloses home, routine
- What it means
- Public to anyone, without logging in.
- Discloses
- home, routine
Rated High because a public profile under your name discloses your family, your children, a legal matter or your home (rule R4).
- What it is
- Public reviewer page attached to a Google account — reviews, photos and ratings
- Found
- Public profile
- What it means
- Public to anyone, without logging in.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Professional network — profiles are public by default
- Found
- Public profile; discloses workplace
- What it means
- Public to anyone, without logging in.
- Discloses
- workplace
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
jordan@citizen-landscapes.example
work email · 5 findings- What it is
- Google account — mail, Maps, YouTube and sign-in for other services
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Online graphic-design tool
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Appointment-scheduling tool
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- A page you publish yourself
- Found
- Published by you
- What it means
- Public to anyone, without logging in.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
Work email — breach and stealer-log records
No breach or stealer-log record contains your work email in the sources checked.
+61 491 570 156
mobile · 9 findings- What it is
- Family location-sharing app
- Found
- A family circle registered to your mobile
- What it means
- One login stands between a stranger and the live position of everyone in the circle.
Rated High because a family-location app is registered to your number (rule R5).
- What it is
- Messaging (Meta)
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Social network (Meta)
- Found
- Registered
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Messaging app — a number lookup shows the profile name and photo
- Found
- Registered as “Jordan”
- What it means
- An account exists or existed against this identifier. It shows a stranger where your email or number will work for a login or a password reset, and where a reused password would matter. It is not proof that you still use the service.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Social network (Meta)
- Found
- Phone, name, no password
- What it means
- Your record was inside a data set that was taken from the service and is traded; treat every field listed as in criminal hands.
Rated Medium because your records carry scrambled passwords or contact details, not readable passwords (rule R7).
- What it is
- Mobile network — live number status
- Found
- Number live and active on Telstra
- What it means
- A live check of the number's network status. It shows the number is real and active — nothing more.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
- What it is
- Crowd-sourced caller-ID app
- Found
- Returns “Jordan Citizen” for the number
- What it means
- Publishes your name against your number to anyone who looks it up; each service has a removal page.
Rated Medium because a lookup service returns your name for your number (rule R8).
- What it is
- Contact-book aggregator (built from other people's uploaded address books)
- Found
- Holds the number as “Jordan Landscaping”
- What it means
- A record held by a third party that ties the number to your identity details.
Rated Low because only registrations were found, with nothing exposed beyond a name or handle (rule R10).
Mobile — stealer-log records
No stealer-log (malware) record contains your mobile in the sources checked.
Breached data
The exposed identity details
- Names
- Jordan Citizen · F01, F05, F06, F15, F16, F17, F27Jordan C (unknown) · F07Jordan (unknown) · F26
- Emails
- jordan.citizen@example.com · F01, F02, F03, F04, F05, F06, F07, F08, F09, F10, F11, F12, F13, F14, F15, F16, F17jordan@citizen-landscapes.example · F18, F19, F20, F21
- Usernames
- jordanc_designs (historical) · F01jcitizen88 (historical) · F03jordan_c_88 (historical) · F04jordan.citizen (historical) · F11
- Addresses
- 12 Wattle Court, Eastvale NSW 2999 (historical) · F05
- Record IDs
- Dymocks member 3085000000012345 (historical) · F06
Exposed passwords
Passwords are shown partially so you can recognise them. Assume the full values are known to criminals. If you use one anywhere, change it there too.
| Recognition mask | Form | Identifier | Records | Most recent index |
|---|---|---|---|---|
| hashed (bcrypt) | Scrambled | jordan.citizen@example.com | F01 | 10 Jun 2019 |
| Su••••••••••6! | Readable, shown masked | jordan.citizen@example.com | F02 | 7 Sep 2020 |
| hashed (sha1) | Scrambled | jordan.citizen@example.com | F03 | 21 Feb 2019 |
Records and fields exposed
| Record | Identifier | Fields in the record | Incident / index dates | Rating |
|---|---|---|---|---|
| Canva Canva's May 2019 breach exposed names, usernames, email addresses, cities and hashed passwords for about 137 million accounts. | jordan.citizen@example.com | Email, Name, Username, Scrambled password, Other fields | Incident: 24 May 2019 Indexed: 10 Jun 2019 | Medium |
| Combined credential lists Combined lists merge many older leaks into one file for credential-stuffing attacks. The original source of your row is not recorded. | jordan.citizen@example.com | Email, Readable password | Incident: 2020 Indexed: 7 Sep 2020 | High |
| MyFitnessPal MyFitnessPal's February 2018 breach exposed usernames, email addresses and hashed passwords for about 150 million accounts. | jordan.citizen@example.com | Email, Username, Scrambled password | Incident: Feb 2018 Indexed: 21 Feb 2019 | Medium |
| Dailymotion Dailymotion's 2016 breach exposed email addresses, usernames and hashed passwords for tens of millions of accounts. | jordan.citizen@example.com | Email, Username | Incident: 20 Oct 2016 Indexed: 22 Jun 2020 | Low |
| MyDeal MyDeal's October 2022 breach exposed names, email addresses, phone numbers, delivery addresses and, for some customers, dates of birth. No passwords or payment details. | jordan.citizen@example.com | Email, Name, Phone, Address, Date of birth | Incident: 14 Oct 2022 Indexed: 2 Nov 2022 | High |
| Dymocks Dymocks reported in 2023 that customer records held by a third-party loyalty provider had been accessed. Passwords and payment details were not among the stolen information. | jordan.citizen@example.com | Email, Name, Phone, Date of birth, Customer ID, Registration date | Incident: 20 Jun 2023 Indexed: 3 Sep 2023 | Medium |
| Facebook About 533 million Facebook profiles were scraped in 2019 through a contact-import flaw and circulated freely from April 2021: phone numbers, names, locations and, for some, dates of birth and email addresses. No passwords. | +61 491 570 156 | Phone, Name, Other fields | Incident: Aug 2019 Indexed: 6 Apr 2021 | Medium |
How the data got out
- 20 Oct 2016LowDailymotion breached
Your email address and the username jordan_c_88.
Enables: username reuse tracking
- Feb 2018MediumMyFitnessPal breached
Your email address, the username jcitizen88 and a scrambled password.
Enables: password cracking
- 24 May 2019MediumCanva breached
Your email address, the username jordanc_designs, name, other profile details and a scrambled password.
Enables: password cracking
- Aug 2019MediumFacebook data scraped
Your name, mobile number and other profile details.
Enables: targeted phishing and SIM-swap pretexting
- 2020 · index dateHighMerged into combined lists
Your email address and a readable password.
Enables: account takeover
- 14 Oct 2022HighMyDeal breached
Your email address, name, a phone number, date of birth and address.
Enables: identity fraud and targeted phishing
- 20 Jun 2023MediumDymocks breached
Your email address, name, a phone number, date of birth and membership ID.
Enables: identity fraud and targeted phishing
Action roadmap
Grouped by who acts, then ordered by priority. Mark each action as you complete it.
Do now
Change the password shown masked in this report — and anywhere else you used it
High20 minTurn on two-step verification on jordan.citizen@example.com
High5 minLock the family-location app: unique passphrase, two-factor, and check who is in the circle
High10 minMake Strava private, or remove what it discloses
High10 minLock the accounts that matter — unique passphrase and two-factor on Dropbox, Microsoft, Instagram, Duolingo, Google and Canva and others
Medium30 minPull your number from the caller-ID and contact-list services
Medium20 minCheck the recovery phone, recovery email and recent sign-ins on jordan.citizen@example.com
Medium5 minClose the accounts you no longer use
Medium30 minAsk your carrier for a port-out PIN or number lock
Medium15 minStart using a password manager
Low20 minNeeds someone else
Ask your IT provider to confirm multi-factor sign-in on jordan@citizen-landscapes.example
Medium5 minAwareness and ongoing protection
Your date of birth and address cannot be changed — fortify around them
Medium10 minThis action strengthens your protection where the disclosed information cannot be recalled.
Treat calls or messages that already know your name, birthday or old number with suspicion
Medium0 minThis action strengthens your protection where the disclosed information cannot be recalled.
Decide where your PayID lives
Low5 minStandard notices
Scope, method and how to read this
What was checked
Checks conducted: 19 Sep 2026.
- Breach records
- Malware-harvested records
- Account registration signals
- Public web
- Network status
- Public profiles
How to read the results
- A list's index date is the day it was catalogued, not the day the breach happened.
- Combined lists recycle older leaks. Three lists are not three breaches.
- A platform signal means the address was seen registered there. It does not prove the account is active or yours.
- Nothing in this report proves someone is inside your accounts today.
Passwords are shown partially so you can recognise them. Assume the full values are known to criminals. If you use one anywhere, change it there too.
Confidence in the connection
- Confirmed
- Two or more independent identifiers, or confirmed by you.
- Likely
- Strong single-thread evidence.
- Possible
- Consistent but unanchored.
- Unconfirmed – weak
- Name-only.
Exposure severity
Critical · High · Medium · Low. Registration-only and network-status findings are marked Info. Where supplied, each finding prints the rule that set its rating.
Confidence describes the connection. Severity describes the exposure; the two are separate.
Retention. Your findings and report are deleted 7 days after release. A salted one-way hash of each identifier you verified is kept for 30 days to prevent duplicate and abusive use of the service; the salt is discarded after 30 days, after which the hash cannot be matched to anything. Invoice and audit records are kept only as the law requires. Full password values are never stored at any stage.