Deceased statuses leaked: what it means and what to do
Risk level: medium. Can you change it: no. Found in 1 breaches in this directory.
What this data is
A flag in a company or government record showing that an account holder has died. Occasionally it is set in error on someone who is alive.
The risk on its own
For a person who has died, the flag tells criminals which identities are unmonitored, because nobody is reading that person's mail or email. For a living person flagged by mistake, the same record can cause refused payments, frozen accounts and cancelled services. The flag itself cannot be spent or used to log in.
The risk combined with other data
With a name, date of birth and address, the flag helps fraudsters choose identities to reuse for credit or benefit claims, and it pinpoints bereaved families for scams. For someone flagged in error, a leaked record can spread the mistake into other databases and data broker files.
How criminals use it
A fraudster filters a leaked customer list for deceased account holders and applies for credit in their names.
A bereaved spouse is called by a fake debt collector who already knows the account holder died.
A living person wrongly marked as deceased has a bank account or benefit payment stopped and struggles to prove they are alive.
Data brokers copy a wrong flag, and the living person then starts failing online identity checks.
What to do now
If the flag is correct, notify the credit bureaus and government agencies of the death and ask for a deceased marker on the credit file.
If you are wrongly flagged as deceased, contact the organisation holding the record with photo ID, ask for written confirmation of the correction, then check your credit reports for the same error.
In the US, a living person wrongly listed as deceased in Social Security records should visit a Social Security office with identification to have it corrected.
Close or memorialise the deceased person's email and social accounts so they cannot be taken over.
Warn surviving family, especially an older partner, about calls demanding debts or fees connected to the death.
Remove the deceased person's details from people search and data broker sites that republish personal records.
Frequently asked questions
I have been wrongly marked as deceased. What do I do?
Contact the organisation that set the flag with photo ID and ask for a written correction. Then check your credit reports and main accounts in case the error spread.
Why would a deceased flag be in a breach at all?
Banks, insurers and service providers keep it to stop payments and block misuse, so it sits in the same customer database that was breached.
Should I close all the accounts of a relative who died?
Close or freeze them as soon as the executor can. Keep the email account open only as long as it is needed to find other accounts and bills.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.