Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - Application Security - The Graveyard of the Internet: Most Accounts Are Dead, But Still Dangerous
Application Security Attacks Latest News News & Analysis Risk Management Security Threats and Vulnerabilities

The Graveyard of the Internet: Most Accounts Are Dead, But Still Dangerous

Kirsten DoyleBy Kirsten DoyleJuly 25, 20254 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
Graveyard of the Internet
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

Lurking in the shadow of the sleek platforms and subscription stacks we see today, lies a forgotten digital world. It’s populated by millions of inactive logins; remnants of fleeting curiosity or abandoned convenience.

These are known as zombie accounts. According to a new survey by Secure Data Recovery, 94% of Americans have them. 

Pandora, Groupon, Shutterfly, Tumblr. Once darlings of the digital age, they are now little more than names on a login screen that few remember. Secure Data Recovery’s study asked a simple question: what platforms have we left behind, and which ones left us wishing we hadn’t signed up at all?

The answers reveal a landscape of disuse and disappointment. 

A Cemetery of Clicks

Leading the pack is Pandora, with four in ten Americans saying they have an account they no longer use. Hot on its heels comes Groupon, whose endless deals may have once been irresistible but now linger like expired coupons. Third is Shutterfly, full of half-finished photobooks and memories uploaded but never organized.

Rounding out the top tier: Dropbox, Tumblr, Flickr, and Duolingo. The latter perhaps a symbol of good intentions and the language skills we never quite mastered.

Grouped by category, Tinder claims the most deserted dating profiles, with OkCupid and Bumble close behind. On the work side, Dropbox leads again, while Glassdoor and Indeed reflect a hopeful past of job-hunting. Among financial apps, Acorns and Mint top the zombie list, suggesting forgotten budgets and investment dreams.

As Secure Data Recovery puts it: “That account you haven’t logged into for over a year? It now lives in a graveyard with the rest of the zombie accounts, waiting to be brought back to life.”

Disappointed, Not Just Disinterested

Not all accounts die quietly. Some were abandoned with intent. When asked which services proved most disappointing, Americans pointed first to Facebook. Once a social anchor, now a digital ghost town for many. X (formerly Twitter) was next, trailing only slightly, followed by Amazon Prime Video, a platform some say has lost its spark.

Also on the list: LinkedIn, Tinder, Apple TV+, Netflix, Disney+, and Bumble. Services that promised connection, entertainment, or opportunity, but failed to deliver for many users.

Interestingly, some services made both the “most disappointing” and “most missed” lists. Amazon Prime Video ranked third in each. Netflix led the “missed” list, suggesting that even when users walk away, the content still calls them back. YouTube came in second.

Risks Beneath the Surface

Boris Cipot, senior security engineer at Black Duck, says this digital debris carries real risk.

“As our interests and needs change, it’s only natural that we switch things like music streaming services or reading apps. But we often leave behind digital footprints, old accounts that still store personal information,” he says. 

While some platforms notify users before deleting dormant accounts, many do not. “Leaving these accounts open and forgotten is risky. In the event of a data breach, attackers can use outdated information to gain access to your current accounts or trick you into revealing more.” 

The danger multiplies for users who recycle passwords. “If you reused passwords across accounts, the risk is even greater.” 

Cipot’s advice is clear. Start with what you still use. “Secure your active accounts first. Use strong, unique passwords. A password manager helps. Many browsers like Chrome have one built in. Enable multi-factor authentication wherever possible.”

Then, take inventory. “You’ll remember accounts you haven’t touched in years. If you no longer need them, log in and delete them, or ask support to help. If that’s not immediate, change the password right away.” 

He also cautions against phishing attempts tied to old accounts. “If you get an email from a service you don’t use anymore, don’t click the link. Go directly to the site and check for yourself.” 

“The internet remembers everything, even the things we forget,” Cipot warns. “Taking control of your digital presence means cleaning house. What no longer serves you could become a problem if you don’t remove it.” 

Tidy Up, Stay Safe

Secure Data Recovery reminds users that password reuse and account neglect often go hand-in-hand. That old Tumblr login from 2009? It could be the weak link in your digital life today. Especially if the same password opens your work inbox. 

“Whether you’re actively using your accounts or have a cemetery full of zombies,” the report says, “the important thing is to keep your credentials safe.” 

Secure Data Recovery surveyed 2,493 Americans in March 2025 about their account usage habits. The survey covered 94 digital services across social media, finance, and productivity. Respondents ranged in age from 18 to 76.

Kirsten Doyle
Kirsten Doyle
Information Security Buzz News Editor

Kirsten Doyle has been in the technology journalism and editing space for nearly 24 years, during which time she has developed a great love for all aspects of technology, as well as words themselves. Her experience spans B2B tech, with a lot of focus on cybersecurity, cloud, enterprise, digital transformation, and data centre. Her specialties are in news, thought leadership, features, white papers, and PR writing, and she is an experienced editor for both print and online publications.

  • Kirsten Doyle
    AI-Powered Attacks Become Top Concern for Security Professionals, New Filigran Survey Reveals
  • Kirsten Doyle
    ShinyHunters targets Oracle PeopleSoft customers through critical zero-day
  • Kirsten Doyle
    SIG report: AI-generated code is linked to twice the security risk and rising technical debt
  • Kirsten Doyle
    Miasma worm spreads from Red Hat packages to Microsoft repositories

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

AppSec is dead, long live AI security

April 29, 20265 Mins Read

Managing App Access on Frontline Devices in an Always-On World

March 9, 20264 Mins Read

OWASP Top 10 2025: New Enemies, Old Foes, and an Approach to Vulnerability Remediation That Must Evolve

January 22, 20265 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}