{"id":8068,"date":"2026-06-03T12:00:00","date_gmt":"2026-06-03T09:00:00","guid":{"rendered":"https:\/\/blog.eset.ee\/et\/2026\/06\/03\/lessons-for-life-why-childrens-data-is-a-long-term-identity-risk\/"},"modified":"2026-06-03T12:00:00","modified_gmt":"2026-06-03T09:00:00","slug":"lessons-for-life-why-childrens-data-is-a-long-term-identity-risk","status":"publish","type":"post","link":"https:\/\/blog.eset.ee\/et\/en\/2026\/06\/03\/lessons-for-life-why-childrens-data-is-a-long-term-identity-risk\/","title":{"rendered":"Lessons for life: Why children\u2019s data is a long-term identity risk"},"content":{"rendered":"<p>When we talk about cybersecurity and digital safety in the context of our children, it\u2019s often framed in one of two ways. Either it\u2019s about inappropriate or unsafe content \u2013 of the <a href=\"https:\/\/www.welivesecurity.com\/2023\/02\/06\/online-safety-laws-whats-store-childrens-digital-playgrounds\/index.html\">sort that COPPA<\/a> is meant to regulate in the US. Or it\u2019s about managing the psychological and social impacts of excessive screen time. But there\u2019s an elephant in the room.<\/p>\n<p>Our kids are exposed to many of the same identity, privacy, and data security risks as their parents. In fact they may be even more at risk. Helping them understand how to protect their data and online accounts at an early age is an increasingly important parental responsibility. <\/p>\n<h2>Why do people want my kids\u2019 data?<\/h2>\n<p>Our children are digital natives. From an early age they might have logins to school accounts, <a href=\"https:\/\/www.welivesecurity.com\/roblox-executors-fun-games-someone-gets-hacked\/index.html\">gaming profiles<\/a>, cloud photos, health records, and accounts with a variety of other apps. All of these contain potentially lucrative <a href=\"https:\/\/www.welivesecurity.com\/child-identity-theft-how-keep-kids-personal-data-safe\/index.html\">data for identity thieves<\/a>.<\/p>\n<p>Why is this information a popular target? Because from a fraud perspective it has a relatively long shelf life. That means, if it\u2019s stolen and used by a scammer to open a new line of credit, it\u2019s unlikely the victim would find out, until perhaps they apply for their first loan many years later. What\u2019s more, it will have a pristine credit score, meaning the fraudulent application will likely sail through unchecked. Fraudsters might use it as is, or combine it with made-up information to create synthetic identities.<\/p>\n<p>The <a href=\"https:\/\/www.welivesecurity.com\/cybersecurity\/ai-driven-identify-fraud-havoc\/index.html\">emergence of AI tools<\/a> has made it far easier to spin up these fake identities. They might be harder for companies to spot. But when they do finally flag fraud, the impact on your child\u2019s credit history can be severe.<\/p>\n<p>These are not theoretical risks. One <a href=\"https:\/\/www.ftc.gov\/system\/files\/ftc_gov\/pdf\/csn-annual-data-book-2024.pdf\">report reveals the<\/a> story of risk and compliance professional Renata Galv\u00e3o, whose identity was stolen at the age of six and used to run up debt in excess of $400,000. It reportedly took her over two decades to clear her name and restore her credit rating. In another case, <a href=\"https:\/\/fortune.com\/2024\/11\/28\/parents-stealing-childrens-identities-access-debt-destroying-kids-credit-scores\/\">Axton Betz-Hamilton was 11<\/a> when her identity was stolen and used to rack up thousands of dollars in unpaid credit card bills. She only found out when applying to set up her first utility bill at college.<\/p>\n<p>Current data is hard to come by, but the <a href=\"https:\/\/www.ftc.gov\/system\/files\/ftc_gov\/pdf\/csn-annual-data-book-2024.pdf\">FTC claims<\/a> that child identity theft increased by 40% between 2021 and 2024.<\/p>\n<h2>What could go wrong?<\/h2>\n<p>Children\u2019s data is at risk in other ways. Kids might be digitally savvy enough to set up online accounts, but they\u2019re not always security-smart. They may be more prone to fall for a phishing message; especially if it appears to be <a href=\"https:\/\/www.welivesecurity.com\/cybersecurity\/so-your-friend-has-been-hacked-could-you-be-next\/index.html\">sent from a trusted authority or friend<\/a>. Too-good-to-be-true offers, innocuous-looking quizzes and FOMO-type ads are all more likely to hit home if the target is a credulous 13-year-old rather than a skeptical adult. Kids are also more likely to unwittingly download malware onto their devices or share their passwords and personal info with their peers, compounding security risk.<\/p>\n<figure><img decoding=\"async\" alt=\"roblox-hacked-accounts\" height=\"\" src=\"https:\/\/web-assets.esetstatic.com\/wls\/2026\/06-26\/roblox-hacked-accounts.png\" title=\"Roblox gamers sharing their experiences after downloading fake versions of Solara. Source: YouTube\" width=\"\"><figcaption><em>Roblox gamers sharing their experiences after downloading fake versions of Solara. Source: <a href=\"https:\/\/www.youtube.com\/watch?v=E7rFREQGFWo\">YouTube<\/a><\/em><\/figcaption><\/figure>\n<p>But it\u2019s not just our children who represent a potential weak link in the security chain. Research from the <a href=\"https:\/\/www.southampton.ac.uk\/news\/2025\/09\/researchers-campaign-to-raise-awareness-of-sharenting-dangers.page\">University of Southampton<\/a> last year found that nearly half (45%) of parents regularly share information about their children online. Sharenting like this increases the risk of it falling into the hands of fraudsters. Around one-in-six children have already experienced at least one form of digital harm, including <a href=\"https:\/\/www.welivesecurity.com\/what-happens-online-stays-online-and-other-cyberbullying-myths-debunked\/index.html\">cyberbullying<\/a>, privacy breaches, or identity misuse, the study claimed.<\/p>\n<p>There\u2019s also a growing risk that the edtech vendors, school platforms, gaming providers, smart toy makers, social media companies and other firms entrusted with your child\u2019s data are themselves breached. The non-profit <a href=\"https:\/\/www.idtheftcenter.org\/publication\/2025-data-breach-report\/\">Identity Theft Resource Center<\/a> (ITRC) tracked 3322 data breaches in the US last year \u2013 an all-time high and a 79% increase from five years ago. Nearly 279 million victims had their data exposed, with the healthcare and education sectors among the top five for breaches.<\/p>\n<p>The proliferation of AI apps is also a privacy risk. Kids may use AI tools with no understanding that they\u2019re actually sharing sensitive information which could end up in the wrong hands if the provider is breached.<\/p>\n<p>Gaming accounts are another attractive target for fraudsters. They contain highly prized assets such as:<\/p>\n<ul>\n<li>Your credit card\/financial information, for <a href=\"https:\/\/www.welivesecurity.com\/2022\/06\/27\/5-ways-cybercriminals-steal-credit-card-details\/index.html\">use in fraud<\/a><\/li>\n<li>Social graphs that can be used to spam\/phish other kids in the same network<\/li>\n<li>Skins, which can be stolen and cashed out<\/li>\n<li>Private chats which may contain monetizable information<\/li>\n<\/ul>\n<p>All of which creates a large potential surface for your child\u2019s personal information to be exposed.<\/p>\n<div>\n<blockquote>\n<p><em>RELATED READING: <a href=\"https:\/\/www.welivesecurity.com\/parents-protect-children-doxxing\/index.html\">What parents should know to protect their children from doxxing<\/a><\/em><\/p>\n<\/blockquote>\n<\/div>\n<h2>How to check if something\u2019s gone wrong<\/h2>\n<p>There are several ways to check if your child has had their identity or personal information (including credentials) stolen. The following should all be red flags:<\/p>\n<ul>\n<li>Passwords that <a href=\"https:\/\/www.welivesecurity.com\/2022\/01\/20\/how-know-if-your-email-hacked\/index.html\">suddenly don\u2019t work<\/a>, indicating someone has accessed their account and changed the logins<\/li>\n<li>Missing skins, coins or other items in your child\u2019s gaming account<\/li>\n<li>Notifications about account changes, logins or resets<\/li>\n<li>Purchases that you didn\u2019t authorize<\/li>\n<li>Friends and contacts reporting strange activity or messages from your child\u2019s account<\/li>\n<li>Your child is denied welfare benefits (because someone else is using their Social Security details)<\/li>\n<li>They are denied a student loan or bank account due to a poor credit rating<\/li>\n<li>Your child receives a government notice claiming unpaid taxes (because someone is using their details to register for new jobs)<\/li>\n<li>You receive phone calls or correspondence claiming overdue bills run up by your child<\/li>\n<\/ul>\n<h2>It\u2019s a shared responsibility<\/h2>\n<p>In truth, there are multiple stakeholders involved in protecting your children\u2019s identity data. Parents are the most obvious. But also your school, and the app developers and device makers they are often forced to share information with. No single party can manage and secure the entire data lifecycle.<\/p>\n<p>So what can you do as a parent? Limit data sharing, securely configure account settings, and teach your child best practices.<\/p>\n<p>Start with the data. Take a step back and consider whether it really is necessary to set up that new account, grant permissions to that school app, or \u201csharent\u201d online. Data minimization is one of the core principles of the GDPR. The less personal information is out there, the lower the risk of it ending up in the wrong hands.<\/p>\n<p>Next, for the accounts they do have, adjust the settings to minimize risk. That means long, strong and unique passwords for every account, stored in a family password manager. That will reduce the risk of brute-force attacks. Switch on multifactor authentication (MFA) where possible to mitigate phishing risks.<\/p>\n<p>Review all the privacy settings on all their apps and social platforms to lock them down to the most secure version. That should mean location sharing\/tracking is restricted or turned off. Restrict any in-app purchases so they require your approval. Keep all devices and apps updated so they\u2019re less exposed to hacking attempts. And use in-app parental controls where available to monitor usage and minimize sensitive data sharing.<\/p>\n<p>Apply for a credit freeze for your child\u2019s identity with all three major credit bureaus. This will require some paperwork, but is worth it for the peace of mind that means no third party can apply for credit in their name.<\/p>\n<p>Finally, it\u2019s time to sit down with your kids and explain the importance of identity protection, what\u2019s at stake, and how bad people can steal and use their data \u2013 including popular phishing tactics. Teach them the basics of good password management, and how to spot suspicious activity online. Above all, they should feel safe telling you anything.<\/p>\n<p>Keeping your child\u2019s identity safe should not be about restricting their digital world. It\u2019s about giving them the confidence to traverse it safely \u2013 now and in the future.<\/p>\n<\/p>\n<p class=\"wls-source\"><a href=\"https:\/\/www.welivesecurity.com\/en\/kids-online\/lessons-life-childrens-data-long-term-identity-risk\/\" rel=\"nofollow noopener\" target=\"_blank\">Read the full analysis on WeLiveSecurity \u2192<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Your child\u2019s first data breach may happen before they\u2019ve even opened a bank account. Here\u2019s how to keep their digital life safe.<\/p>\n","protected":false},"author":5,"featured_media":8069,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2902],"tags":[],"class_list":["post-8068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-home-family"],"acf":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/8068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/comments?post=8068"}],"version-history":[{"count":0,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/8068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/media\/8069"}],"wp:attachment":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/media?parent=8068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/categories?post=8068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/tags?post=8068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}