- Most people forget their old accounts but criminals never forget how to exploit them reports of warns
- Zombie accounts are digital weak spots just waiting for password to recycle to destroy everything
- Platforms like Groupon and Pandora are filled with login that no one looks anymore
Forgot explaining apps that you no longer use may not look like your most urgent security concern, but new research has claimed they can be far more than digital root.
A survey of Secure Data Recovery found that 94% of respondents were admitted to having one or more zombie accounts – accounts that were not used for at least 12 months.
These neglected profiles often remain active and vulnerable, giving cyber criminals a quiet back door into users’ digital life.
Pandora, Groupon and Shutterfly lead the list of forgotten services
Pandora tops the list of abandoned services, with 40% of respondents who admit they still have unused accounts, with groupon and shutter aircraft closely following, reflecting a wider trend with users driving away from once popular platforms.
“The account that you haven’t logged in for over a year? It’s still there,” notes the study warning that abandoned profiles are ripe for hijacking.
These unused accounts are not limited to music or shopping, as photo -sharing platforms such as Dropbox, Tumblr and Flickr are also often forgotten -and the trend even extends to more sensitive categories, with dating apps such as Tinder, Okcupid and Bumble Ranking Highest Publishing. In the economic space, acorn, mint and ynab often remain inactive despite potential access to personal or financial information.
Many users simply forget that these accounts exist, provided inactivity means erasing. In other cases, uninteresting is driving.
Facebook ranks highest in dissatisfaction, followed by Twitter/X and Amazon Prime Video. Some platforms couldn’t keep up with expectations, while others, like Prime Video, alienated users by adding ads.
Interestingly, Prime Video also appears on the list of most missed services, suggesting that users are shared in their views.
The consequences of ignoring these accounts go far beyond the mess.
Recycling of passwords across sites, especially between zombie accounts and work or bank logins, creates serious risk.
Secure Data Recovery warns: “Having the same login to the eight-year-old Tumblr account and your active work email may not be in your best interest.”
How to remain safe
- To reduce risk, you need to review the services you have signed up for – if you no longer use an app or site, delete the account.
- Never reuse passwords. A compromised old account using the same login as your current you can put your data at risk.
- Create strong, unique passwords for each account. A password administrator can help you keep track of them.
- Also check the Privacy settings on accounts you still use. Some may share more than you think. Adjust these settings to limit how much information is visible.
- Whenever possible, enable two-factor approval for additional protection.
- Finally, use antivirus tools, especially on Android phones.
- A good free antivirus can warn you of unsafe apps and record if your device has been compromised.



