Received a text from an unknown number that had a lot of personal info

[Haze]

Title. Basically someone sent me a text saying they used prnt.sc/(any two letters) on Tiktok to get personal info and they found me.

Has my old address but my phone #, email, credit standing, education history, home owner status.

is this something I should be worried about? I didn't really see anything on google about these methods but this is a bit alarming.

As far as I can see no social, DL# or anything, but it was a part of a spreadsheet.

Update:

Ok so apparently, it's this trending thing on tiktok to type "prnt.sc/"2letter4numbers" in your browser and you'll get a random image.

so like prnt.sc/da1773 got me this image.

So it appears a recent screenshot of my personal info is just floating in the digital abyss and this person just happened to find it. Looking at the top of the screenshot it has a call center name and an assigned caller to me, so I'm guessing this is some telemarketer info that leaked.

I don't think anything malevolent is going on here. But still, I won't entertain it and have taken precautions.

Click to shrink...

 

[bangai-o]

Are they asking for a ransom or something?

 

[PeakPointMatrix]

How is your tiktok account linked to stuff like your financials and education history?

I think your first steps are changing your passwords and security info on all your financial accounts for one.

 

[DarkShame3]

You're best off not engaging. Just ignore. I know it can be scary.

 

[smurfx]

seems like basic shit you can get online. probably a new form of trying to fish for payoffs.

 

[Grudy]

How is that information on TikTok in the first place?

 

[smurfx]

How is that information on TikTok in the first place?

Click to shrink...

its not. they somehow got email addresses from tik tok and are fishing or they are using tik tok because its the most popular new social media site.

 

[Nothing Loud]

Whitepages.com makes it easy and public to get phone numbers, addresses, etc—you can even pay for court records. If they have your name and email (which is easy to get these days thanks to leaks and hacks), they can get everything else. I wouldn't worry about it. Just change your passwords and disengage unless they threaten or ransom you. In that case, call the police. Otherwise disengage. You'll be fine

 

[Haze]

How is your tiktok account linked to stuff like your financials and education history?

I think your first steps are changing your passwords and security info on all your financial accounts for one.

Click to shrink...

Of
I don't even have a tiktok. I use my company's tiktok for work but that's about it. No personal info attached to that.

I didn't respond to them and they didn't ask for anything yet.
I did have a fraud alert on my credit card twice last week so that being so close to this is a bit worrying.

 

[Tapiozona]

Everything they sent us all public record, ignore it

 

[Plaguefox]

Edit: removed moot speculation.

 

[____]

Continue to ignore the numbnut.

Then contact your credit cards and bank as a precaution. They'll monitor your activity for you for anything suspicious.

 

[Squarehard]

All of that information can be found/bought fairly easily, so I wouldn't worry about it.

They'll get that information, or buy it for cheap, then try to see if they can cash out on it.

 

[Haze]

TIL that my credit standing is publicly available info

 

[Kittens McMittens]

Tbh, that sounds like a bot intro. Normally on PSN you get 'hey, I found you via the people search'. I had an email conversation recently with a bot that claimed to have found me via some dating site.

If they have personal info, most likely the bot has that in a database. It's just looking for hits; if you keep on responding you might eventually get a human to play with.

 

[Musubi]

Yeah as others have said DON'T ENGAGE whatever you do. They are fishing for a response.

 

[IDreamOfHime]

TIL that my credit standing is publicly available info

Click to shrink...

Why would it not be? How else would someone you want to borrow/lease from be able to check your rating?

 

[Zultima]

Unfortunately this amount of information is relatively easily accessible via Google for lots of people. Scary yes but wouldn't worry, just ignore it. Trying to phish you. I Google my name and my phone and address show up in like the first result. Seems to be leaked via voter records. Just the world we in.

 

[Haze]

Why would it not be? How else would someone you want to borrow/lease from be able to check your rating?

Click to shrink...

I assumed they had to go thru certain bureaus to get that info

 

[The Argus]

This is a phishing campaign. Ignore. Also y'all, stop calling it "fishing". A similar one was rampant last year with a password you once used in achieved in a breach (mostly Adobe) . This is just the second step.

 

[SinkFla]

This is a phishing campaign. Ignore. Also y'all, stop calling it "fishing". A similar one was rampant last year with a password you once used in achieved in a breach (mostly Adobe) . This is just the second step.

Click to shrink...

Yeah Jim Browning has a good video on this but I'm more familiar with this happening over email, text is a new one for me lol. OP you can check the email that's registered to tiktok here and see if it was compromised (which I'm going to guess that it is):

Have I Been Pwned: Check if your email has been compromised in a data breach

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

haveibeenpwned.com

In fact check all your emails.

 

[Nappuccino]

Maybe change your passwords and activate 2factor authentication where you can. It might not matter in this instance, but it's all so important to have anyway.

 

[ZackieChan]

Were you messaging this guy, by any chance?

 

[RedOnePunch]

I assumed they had to go thru certain bureaus to get that info

Click to shrink...

is the credit standing accurate? They might just be guessing a range

 

[mAcOdIn]

I got an email one day claiming this person had installed a trojan on my PC, recounted one of my passwords and threatened to send a recording of me masturbating to my contacts if I didn't pay like 900 dollars in Bitcoin

I got a kick out of it and showed it to my coworker and asked her to please not get mad at me if she gets sent the video.

But really I wasn't worried, the password was a password I used but not one I used recently, and I don't have a webcam and the programs I had used that password on wouldn't allow anyone to install a trojan on my PC anyways. So I assume one of the mobile games I used at one point was compromised and rather than threatening to steal some useless mobile game account or something they decided to aim high and extort me on the hope I beat off in front of the computer and would be mortified if it was recorded. Nice try.

 

[Wingfan19]

Were you messaging this guy, by any chance?

Click to shrink...

Don't be dissing Williams like that

 

[Haze]

is the credit standing accurate? They might just be guessing a range

Click to shrink...

It's not an exact number but it is accurate to my current credit in terms of adjective description.

 

[Wrestleman]

I got an email one day claiming this person had installed a trojan on my PC, recounted one of my passwords and threatened to send a recording of me masturbating to my contacts if I didn't pay like 900 dollars in Bitcoin

I got a kick out of it and showed it to my coworker and asked her to please not get mad at me if she gets sent the video.

But really I wasn't worried, the password was a password I used but not one I used recently, and I don't have a webcam and the programs I had used that password on wouldn't allow anyone to install a trojan on my PC anyways. So I assume one of the mobile games I used at one point was compromised and rather than threatening to steal some useless mobile game account or something they decided to aim high and extort me on the hope I beat off in front of the computer and would be mortified if it was recorded. Nice try.

Click to shrink...

Hahaha my friend got this exact scam a week or two ago but it threatened to send it to FB friends instead of the email contacts

 

[Rellodex]

Yeah Jim Browning has a good video on this but I'm more familiar with this happening over email, text is a new one for me lol. OP you can check the email that's registered to tiktok here and see if it was compromised (which I'm going to guess that it is):

Have I Been Pwned: Check if your email has been compromised in a data breach

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

haveibeenpwned.com

In fact check all your emails.

Click to shrink...

I remember finding my Spotify username and password in plain text along with like 1000 other people's. Spotify assured me there was "no data breech" however.

And radaris or whatever that site is freaks me out.

Unfortunately MySpace was huge when I was in high school so some of that stuff is just out there.

 

[Chaosblade]

I got an email one day claiming this person had installed a trojan on my PC, recounted one of my passwords and threatened to send a recording of me masturbating to my contacts if I didn't pay like 900 dollars in Bitcoin

I got a kick out of it and showed it to my coworker and asked her to please not get mad at me if she gets sent the video.

But really I wasn't worried, the password was a password I used but not one I used recently, and I don't have a webcam and the programs I had used that password on wouldn't allow anyone to install a trojan on my PC anyways. So I assume one of the mobile games I used at one point was compromised and rather than threatening to steal some useless mobile game account or something they decided to aim high and extort me on the hope I beat off in front of the computer and would be mortified if it was recorded. Nice try.

Click to shrink...

Pretty sure I got this exact same email recently. It was funny because it was clearly a standard email sent out en mass. The username and password combo was the only thing accurate in the entire email, everything else was either impossible (likewise, no web cam, also no contacts in that email), wrong, or too vague to mean anything.

That password was actually the first password I ever even used, back when I was using the same password for everything. It would probably be almost old enough to drive. I'd guess it was probably from a hack/leak of something Runescape related.

 

[ZackieChan]

Don't be dissing Williams like that

Click to shrink...

Imma give him another chance

 

[m0therzer0]

I got an email one day claiming this person had installed a trojan on my PC, recounted one of my passwords and threatened to send a recording of me masturbating to my contacts if I didn't pay like 900 dollars in Bitcoin

I got a kick out of it and showed it to my coworker and asked her to please not get mad at me if she gets sent the video.

But really I wasn't worried, the password was a password I used but not one I used recently, and I don't have a webcam and the programs I had used that password on wouldn't allow anyone to install a trojan on my PC anyways. So I assume one of the mobile games I used at one point was compromised and rather than threatening to steal some useless mobile game account or something they decided to aim high and extort me on the hope I beat off in front of the computer and would be mortified if it was recorded. Nice try.

Click to shrink...

I actually got that exact one last week, though the email is now asking for $2000 in bitcoin. It's probably related to one of the many account breeches at one site or another over the years, which is why the passwords look legit but are usually real damn old.

 

[DaleCooper]

Got the same ransom mail as some of you are mentioning. The password mentioned in the mail was an ancient one, so it's probably some kids digging up an old breached database. There were also several grammatical errors.

 

[Wingfan19]

I got an email one day claiming this person had installed a trojan on my PC, recounted one of my passwords and threatened to send a recording of me masturbating to my contacts if I didn't pay like 900 dollars in Bitcoin

I got a kick out of it and showed it to my coworker and asked her to please not get mad at me if she gets sent the video.

But really I wasn't worried, the password was a password I used but not one I used recently, and I don't have a webcam and the programs I had used that password on wouldn't allow anyone to install a trojan on my PC anyways. So I assume one of the mobile games I used at one point was compromised and rather than threatening to steal some useless mobile game account or something they decided to aim high and extort me on the hope I beat off in front of the computer and would be mortified if it was recorded. Nice try.

Click to shrink...

Holy crap I got the exact same email... twice. First one went to my spam folder but I occasionally check it to see if anything important got put in there by mistake. Noticed the first line had used a password I used to use a lot when I was younger, but have since deprecated so I knew it was bogus... also I don't have a webcam, so lol. Crazy to see that it looks like it must've come from the same security breach of a site from a long time ago.

 

[SinkFla]

I remember finding my Spotify username and password in plain text along with like 1000 other people's. Spotify assured me there was "no data breech" however.

And radaris or whatever that site is freaks me out.

Unfortunately MySpace was huge when I was in high school so some of that stuff is just out there.

Click to shrink...

Yeah that's fucking scary. I've had people try to log into my stuff but get blockaded by the glory that is 2 step auth lol. I was looking up data breaches over the years and man it's amazing how many companies have had them but I'd never even heard about them or seen them in the news anywhere.

 

[Kitsunebaby]

I got an email one day claiming this person had installed a trojan on my PC, recounted one of my passwords and threatened to send a recording of me masturbating to my contacts if I didn't pay like 900 dollars in Bitcoin

I got a kick out of it and showed it to my coworker and asked her to please not get mad at me if she gets sent the video.

But really I wasn't worried, the password was a password I used but not one I used recently, and I don't have a webcam and the programs I had used that password on wouldn't allow anyone to install a trojan on my PC anyways. So I assume one of the mobile games I used at one point was compromised and rather than threatening to steal some useless mobile game account or something they decided to aim high and extort me on the hope I beat off in front of the computer and would be mortified if it was recorded. Nice try.

Click to shrink...

I got this one a few weeks ago. I knew it was a scam and they had nothing but the idea was so amusing. I masturbate in bed with my laptop sitting on my chest. Like, go ahead and send videos of my awkward o-face from the neck up to whatever contacts you manage to find.

 

[dom]

White pages going online was such a bad mistake and continues to do so.

 

[sweetmini]

Holy crap I got the exact same email... twice. First one went to my spam folder but I occasionally check it to see if anything important got put in there by mistake. Noticed the first line had used a password I used to use a lot when I was younger, but have since deprecated so I knew it was bogus... also I don't have a webcam, so lol. Crazy to see that it looks like it must've come from the same security breach of a site from a long time ago.

Click to shrink...

That one was worldwide, i got it, my family as well etc.
We all are averse to webcams, so yeah.. useless.

It has to be from something very wide like an Amazon breach or something like that, since one of my family member is computer illiterate and it happened anyway.

 

[Haze]

Ok so apparently, it's this trending thing on tiktok to type "prnt.sc/"2letter4numbers" in your browser and you'll get a random image.

so like prnt.sc/da1773 got me this image.

So it appears a recent screenshot of my personal info is just floating in the digital abyss and this person just happened to find it. Looking at the top of the screenshot it has a call center name and an assigned caller to me, so I'm guessing this is some telemarketer info that leaked.

I don't think anything malevolent is going on here. But still, I won't entertain it and have taken precautions.

 

[Stinkinmushroom]

Don't worry and most importantly: Do not answer or engage

 

[SigSig]

Ok so apparently, it's this trending thing on tiktok to type "prnt.sc/"2letter4numbers" in your browser and you'll get a random image.

so like prnt.sc/da1773 got me this image.

So it appears a recent screenshot of my personal info is just floating in the digital abyss and this person just happened to find it. Looking at the top of the screenshot it has a call center name and an assigned caller to me, so I'm guessing this is some telemarketer info that leaked.

I don't think anything malevolent is going on here. But still, I won't entertain it and have taken precautions.

Click to shrink...

I don't think the one who messaged you has ill intent, they likely just stumbled over your info by chance this way and wanted to give you a heads-up. You should probably message LightShot tho and get that screenshot removed.

 

[Haze]

I don't think the one who messaged you has ill intent, they likely just stumbled over your info by chance this way and wanted to give you a heads-up.

Click to shrink...

Yeah that's what I was thinking too, esp since they didn't ask for anything or make any threats. They simply said "hey I did this and found info on you". In fact, the text itself reads

"Hey Haze, I found this trick on Tiktok where you can look up Prnt.sc/(any two letters)(any four numbers) and ran into some personal info. Just thought you'd like to know I found you."

Still, best not to even entertain it.

 

[Deleted member 41520]

Ok so apparently, it's this trending thing on tiktok to type "prnt.sc/"2letter4numbers" in your browser and you'll get a random image.

so like prnt.sc/da1773 got me this image.

So it appears a recent screenshot of my personal info is just floating in the digital abyss and this person just happened to find it. Looking at the top of the screenshot it has a call center name and an assigned caller to me, so I'm guessing this is some telemarketer info that leaked.

I don't think anything malevolent is going on here. But still, I won't entertain it and have taken precautions.

Click to shrink...

This website is shudder-inducing. So 21st-century it's ridiculous. A website where you can access a random screen from a random, personal/intimate scenario somewhere in the world...

I tried a couple of configurations out of curiosity and got a screengrab of a Russian person's C:/ drive hierarchy and a screengrab of a seemingly private conversation in French.

It seems like it could be a third party IMGUR-like service which has leaked a ton of stuff, perhaps used by various companies to take quick screengrabs.

 

[Haze]

This website is shudder-inducing. So 21st-century it's ridiculous. A website where you can access a random screen from a random, personal/intimate scenario somewhere in the world...

I tried a couple of configurations out of curiosity and got a screengrab of a Russian person's C:/ drive hierarchy and a screengrab of a seemingly private conversation in French.

It seems like it could be a third party IMGUR-like service which has leaked a ton of stuff, perhaps used by various companies to take quick screengrabs.

Click to shrink...

Are the just available when people use LightShot?

 

[Deleted member 41520]

Are the just available when people use LightShot?

Click to shrink...

The website doesn't seem to have a browser functionality like IMGUR. You just capture the content and then it's on your hard drive, ala Dropbox? Or online. And then you link directly.

It could be that this / address simply allows you to look directly at pictures on their server? Seems way too basic to be true...

 

[Haze]

The website doesn't seem to have a browser functionality like IMGUR. You just upload and then link directly from elsewhere. It could be it you use that / address you're simply looking at pictures on the server? Seems way too basic to be true...

Click to shrink...

I just search a random one and got a screenshot of Hanes's (the clothing brand) ad revenue report. This is insane.

 

[Deleted member 41520]

I just search a random one and got a screenshot of Hanes's (the clothing brand) ad revenue report. This is insane.

Click to shrink...

Edited my post slightly. This is pretty bizarre:

Are the just available when people use LightShot?

Click to shrink...

The website doesn't seem to have a browser functionality like IMGUR. You just capture the content and then it's on your hard drive, ala Dropbox? Or online. And then you link directly.

It could be that this / address simply allows you to look directly at pictures on their server? Seems way too basic to be true...

 

[Mozendo]

LightShot is a screen capture program.
Once you take a picture you it uploads it and creates a unique URL. The URL isn't protecting and once people guess the algorithm people can view URLs that haven't been shared to them.

I would contact the company to get the picture taken down.

 

[Aurica]

I feel uncomfortable with the images I am able to see.