After walking through a complete OSINT investigation, what are the key security risks that most people expose themselves to?

The biggest OSINT vulnerabilities come from four common habits: reusing usernames, leaving GPS data in photos, publishing work email addresses, and never deleting old social media posts.

What a 55-minute investigation typically uncovers:

Personal data:

• Full legal name and date of birth.
• Home city or neighborhood from location patterns.
• Phone number from data breach databases or public listings.
• Email addresses from various platform registrations.

Professional information:

• Current employer and job title from LinkedIn.
• Previous positions and career trajectory.
• Professional network and colleagues.
• Work email address from company websites or conference registrations.

Social environment:

• Close friends and family members from tagged photos and interactions.
• Romantic relationships from mutual social media activity.
• Hobbies and interests from forum participation and group memberships.
• Daily routines and frequently visited locations.

The four habits that make this possible:

• Same username across every platform, creating a single searchable identity.
• GPS metadata left in uploaded photos, revealing exact locations.
• Work email published on conference sites, linking professional and personal identities.
• Old posts never reviewed or deleted, providing a years-long digital trail.