Dark web

A part of the internet that is not indexed by normal search engines and requires special software to access, often used to buy and sell stolen data and criminal services.

The dark web is reached through tools such as the Tor browser, which hide the identity and location of users and websites. While it has legitimate uses, such as protecting privacy in restrictive countries, it also hosts marketplaces and forums where criminals trade stolen passwords, credit card numbers, personal records and access to compromised business networks.

If your company's data or login credentials end up on the dark web, they can be used for credential stuffing, fraud, identity theft or targeted phishing. Ransomware groups also run leak sites where they publish data stolen from organizations that refuse to pay. Information about Canadian businesses appears on these sites regularly.

Practical tip: dark web monitoring services can alert you when company email addresses or domains appear in breach data. An alert is a prompt to act, so reset the affected passwords, check for unusual sign-ins and confirm multi-factor authentication is enabled. Do not try to browse these marketplaces yourself, as it carries real risks.