Personal Data Exposure Risk Calculator
Estimate your personal data exposure risk score (0–100) based on your online presence, breach history, and privacy practices.
Formula
Risk Score = 0.25·B + 0.10·A + 0.10·S + 0.15·P + 0.10·T + 0.08·W + 0.07·V + 0.05·U + 0.10·D
Where each factor is normalized to a 0–100 sub-score:
- B (Breach History) = min(breaches / 10, 1) × 100
- A (Account Footprint) = min(accounts / 100, 1) × 100
- S (Social Media) = (platforms / 10) × 100
- P (Password Reuse) = ((reuse_level − 1) / 3) × 100 [1=never, 4=always]
- T (2FA Usage) = ((2fa_level − 1) / 3) × 100 [1=all accounts, 4=never]
- W (Public Wi-Fi) = ((wifi_level − 1) / 2) × 100 [1=VPN always, 3=no VPN]
- V (VPN Usage) = ((vpn_level − 1) / 2) × 100 [1=always, 3=never]
- U (Update Habits) = ((update_level − 1) / 2) × 100 [1=immediate, 3=never]
- D (Sensitive Data) = (weighted sensitive items / 46) × 100
Weights: Name+Address=8, Phone=6, DOB=6, Financial=10, Gov ID=10, Medical=6
Final score is clamped to [0, 100]. Higher = greater exposure risk.
Assumptions & References
- Factor weights are based on relative impact severity from cybersecurity literature and NIST SP 800-122 (PII sensitivity guidelines).
- Breach data normalization assumes 10+ breaches represents maximum realistic exposure for an individual (source: HaveIBeenPwned statistics).
- Account footprint normalization at 100 accounts reflects typical high-exposure individuals (Verizon DBIR 2023).
- Password reuse is weighted heavily (15%) as credential stuffing is the #1 account takeover vector (OWASP Top 10).
- Government ID and financial data carry the highest sensitive-data weights due to identity theft and fraud risk (FTC Identity Theft Reports).
- This calculator provides an educational estimate only and does not constitute a professional security audit.
- References: NIST SP 800-122, OWASP Top 10 (2021), Verizon DBIR 2023, FTC Consumer Sentinel Network 2023, HaveIBeenPwned.com.