Skip to main content

Dark Web Monitoring: What to Do If You Receive a Security Alert?

Here you will learn what a Dark Web Monitoring security alert means and which steps you should take if exposed information has been detected.

​

Which Customers Does This Guide Apply To?

This guide applies to Webland customers who have received a security alert from the Dark Web Monitoring service.

Such a notification means that information associated with your domain or company has been discovered in monitored sources.

This does not automatically mean that your website or hosting account has been hacked.

​

1. Review the Security Alert

If you receive a notification, first review the information it contains.

Pay particular attention to:

  • Which email address or user account is affected.

  • What type of information has been detected.

  • Which security measures are recommended.

Access the monitoring portal through a trusted source and review the available details.

If you are unsure whether a notification is genuine, contact our support team before clicking on any links or entering personal information.

​

2. Change Affected Passwords

If login credentials have been exposed, you should change the passwords of the affected accounts immediately.

Use a new, secure password that you have not used before.

If you use the same password for other services, change it there as well.

A secure password should:

  • Be long and as unique as possible.

  • Not be reused across multiple accounts.

  • Not contain easily guessable personal information.

Whenever possible, use a password manager to manage your login credentials securely.

​

3. Enable Multi-Factor Authentication

Enable multi-factor authentication (MFA) if it is available for the affected user account.

This requires an additional verification step alongside your password when logging in.

This helps reduce the risk of unauthorised access, even if a password has been exposed.

​

4. Review Affected User Accounts

Check the affected accounts for unusual activity.

Look out for:

  • Unrecognised logins.

  • Unexpected password changes.

  • Changes to your account settings.

  • Unknown forwarding rules or suspicious activity in your email account.

If you notice any unusual activity, you should secure the affected account immediately.

​

5. Inform Your IT Administrator

If the affected information belongs to a company, inform your IT administrator or the responsible person.

They can check whether additional accounts may be affected and whether further security measures are necessary.

​

Frequently Asked Questions and Common Issues

Does a Security Alert Mean That My Hosting Account Has Been Hacked?

No. An alert means that information has been found in a monitored source.

It does not automatically confirm that your hosting account or website has been compromised.

​

Do I Need to Change My Password?

If your password or login credentials have been exposed, you should change the password immediately.

If you use the same password for multiple services, change it there as well.

​

Can I Have the Discovered Information Removed?

Information that has already been published often cannot be completely removed.

It is therefore important to change the affected login credentials and take additional security measures.

​

I Do Not Recognise the Affected Login Credentials. What Should I Do?

Review the available information in your security alert.

If you cannot identify the details, contact our support team and provide the relevant information.

​

I Received an Alert but Have Not Noticed Any Suspicious Activity.

Even if you have not noticed any unusual activity, you should change the affected passwords and review the security of your accounts.

​

If you need further assistance, our support team will be happy to help you understand the notification and determine the next steps.

Did this answer your question?