The Desk - Notes https://keremalbayrak.com/ Writing on identity protection and the records that wealth quietly puts into circulation. https://keremalbayrak.com/favicon-512.png https://keremalbayrak.com/favicon-512.png 1f1f1d en-GB Copyright © 2026 Kerem Albayrak Thu, 28 May 2026 00:06:33 +0000 The Desk https://keremalbayrak.com/banners/index.png The Desk - Notes https://keremalbayrak.com/ Why the case for protection grows stronger each year https://keremalbayrak.com/why-protection-grows-stronger https://keremalbayrak.com/why-protection-grows-stronger Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Foresight The conditions that make a private life harder to maintain are not stabilising. They are widening, quietly and steadily, in ways that reward acting early. The conditions that make a private life harder to maintain are not stabilising. They are widening, quietly and steadily, in ways that reward acting early.

Read on the desk

]]> Stripe accounts and the access that comes with them https://keremalbayrak.com/stripe-and-payment-processor-account-takeovers https://keremalbayrak.com/stripe-and-payment-processor-account-takeovers Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth A payment processor account holds the operating cash of a business, the customer card list, and the keys to receivables. The account is more valuable than the cash sitting in it. A payment processor account holds the operating cash of a business, the customer card list, and the keys to receivables. The account is more valuable than the cash sitting in it.

Read on the desk

]]> The recovery email on a domain you no longer own https://keremalbayrak.com/the-recovery-email-on-a-domain-you-no-longer-own https://keremalbayrak.com/the-recovery-email-on-a-domain-you-no-longer-own Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity A founder lets the domain of a former venture expire. The domain is bought by a stranger. The recovery emails for accounts set up in the founding years still point to that domain. A founder lets the domain of a former venture expire. The domain is bought by a stranger. The recovery emails for accounts set up in the founding years still point to that domain.

Read on the desk

]]> The quiet leak from a personal assistant https://keremalbayrak.com/the-quiet-leak-from-a-personal-assistant https://keremalbayrak.com/the-quiet-leak-from-a-personal-assistant Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity An assistant holds the calendar, the correspondence, the access to half the accounts that run a private life. A breach of the assistant is a breach of the principal. An assistant holds the calendar, the correspondence, the access to half the accounts that run a private life. A breach of the assistant is a breach of the principal.

Read on the desk

]]> AI voice cloning and the phone call from a relative https://keremalbayrak.com/ai-voice-cloning-and-the-phone-call-from-a-relative https://keremalbayrak.com/ai-voice-cloning-and-the-phone-call-from-a-relative Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity A short sample of someone's voice is enough to generate a phone call that sounds like them. The technology is widely available and almost free. A familiar voice is no longer proof of identity. A short sample of someone's voice is enough to generate a phone call that sounds like them. The technology is widely available and almost free. A familiar voice is no longer proof of identity.

Read on the desk

]]> The second passport and its quiet footprint https://keremalbayrak.com/the-second-passport-and-its-quiet-footprint https://keremalbayrak.com/the-second-passport-and-its-quiet-footprint Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth A second citizenship leaves a more complete record than the holder usually appreciates. The acquisition, the renewal, the use of the document each enter a register that can be read. A second citizenship leaves a more complete record than the holder usually appreciates. The acquisition, the renewal, the use of the document each enter a register that can be read.

Read on the desk

]]> Executive impersonation and the wire transfer https://keremalbayrak.com/executive-impersonation-and-the-wire-transfer https://keremalbayrak.com/executive-impersonation-and-the-wire-transfer Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth An email that appears to come from the principal, asking the assistant or the accountant to move funds urgently, is one of the oldest forms of attack and remains one of the most successful. An email that appears to come from the principal, asking the assistant or the accountant to move funds urgently, is one of the oldest forms of attack and remains one of the most successful.

Read on the desk

]]> The private jet flight tracker https://keremalbayrak.com/the-private-jet-flight-tracker https://keremalbayrak.com/the-private-jet-flight-tracker Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth Commercial aviation trackers publish the movements of private aircraft to anyone who looks. A principal's location and pattern of travel are knowable in close to real time. Commercial aviation trackers publish the movements of private aircraft to anyone who looks. A principal's location and pattern of travel are knowable in close to real time.

Read on the desk

]]> The maritime tracker and the port record https://keremalbayrak.com/the-yacht-tracker-and-the-port-record https://keremalbayrak.com/the-yacht-tracker-and-the-port-record Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth Vessels above a modest size broadcast their position continuously. The signal is logged and republished on consumer maritime trackers. The pattern of where a vessel sits, and for how long, is widely readable. Vessels above a modest size broadcast their position continuously. The signal is logged and republished on consumer maritime trackers. The pattern of where a vessel sits, and for how long, is widely readable.

Read on the desk

]]> The art dealer leak and the consignment list https://keremalbayrak.com/the-art-dealer-leak-and-the-consignment-list https://keremalbayrak.com/the-art-dealer-leak-and-the-consignment-list Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth Galleries and dealers hold the records of who owns what. The records are sometimes breached, more often gossiped, and occasionally subpoenaed. The collection a principal believed was private is named in places they did not expect. Galleries and dealers hold the records of who owns what. The records are sometimes breached, more often gossiped, and occasionally subpoenaed. The collection a principal believed was private is named in places they did not expect.

Read on the desk

]]> Ransomware and the private family office https://keremalbayrak.com/ransomware-and-the-private-family-office https://keremalbayrak.com/ransomware-and-the-private-family-office Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Foresight Family offices hold a high concentration of financial, legal, and personal information in a small operation that often lacks the security posture of the principals they serve. They are increasingly targeted. Family offices hold a high concentration of financial, legal, and personal information in a small operation that often lacks the security posture of the principals they serve. They are increasingly targeted.

Read on the desk

]]> The banker who leaves, and what they carry https://keremalbayrak.com/the-banker-who-leaves-and-what-they-carry https://keremalbayrak.com/the-banker-who-leaves-and-what-they-carry Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth A private banker moves firms. They retain, formally or not, knowledge of their book. The client whose affairs were known to one institution becomes a topic of conversation at another. A private banker moves firms. They retain, formally or not, knowledge of their book. The client whose affairs were known to one institution becomes a topic of conversation at another.

Read on the desk

]]> Domain spoofing and the near-perfect email https://keremalbayrak.com/domain-spoofing-and-the-near-perfect-email https://keremalbayrak.com/domain-spoofing-and-the-near-perfect-email Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity A domain that differs from the genuine one by a single character is registered by an attacker. Emails sent from it look identical to the eye. The technique remains effective because the eye does not check. A domain that differs from the genuine one by a single character is registered by an attacker. Emails sent from it look identical to the eye. The technique remains effective because the eye does not check.

Read on the desk

]]> The old recovery question that was once true https://keremalbayrak.com/the-old-recovery-question-that-was-once-true https://keremalbayrak.com/the-old-recovery-question-that-was-once-true Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity Mother's maiden name. First school. First pet. These answers were once known only to the holder. Now they sit on genealogy sites, school alumni pages, and social posts written years ago. Mother's maiden name. First school. First pet. These answers were once known only to the holder. Now they sit on genealogy sites, school alumni pages, and social posts written years ago.

Read on the desk

]]> The corporate credit card and the receipt leak https://keremalbayrak.com/the-corporate-credit-card-and-the-receipt-leak https://keremalbayrak.com/the-corporate-credit-card-and-the-receipt-leak Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth An expense system holds the trail of where a person eats, sleeps, travels, and meets. The trail is held by the card provider, the expense platform, the accountant who reconciles it, and anyone who has touched the system at any point. An expense system holds the trail of where a person eats, sleeps, travels, and meets. The trail is held by the card provider, the expense platform, the accountant who reconciles it, and anyone who has touched the system at any point.

Read on the desk

]]> The leaked database and what resurfaces years later https://keremalbayrak.com/the-leaked-database-and-what-resurfaces-years-later https://keremalbayrak.com/the-leaked-database-and-what-resurfaces-years-later Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Foresight A breach happens. The breached data circulates for months on forums and then quietens. Years later it surfaces again, repackaged, cross-referenced with other breaches, and turned into a product. A breach happens. The breached data circulates for months on forums and then quietens. Years later it surfaces again, repackaged, cross-referenced with other breaches, and turned into a product.

Read on the desk

]]> The cryptocurrency exchange and the KYC record https://keremalbayrak.com/the-cryptocurrency-exchange-and-the-kyc-trail https://keremalbayrak.com/the-cryptocurrency-exchange-and-the-kyc-trail Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth An exchange holds the passport scan, the proof of address, the source-of-funds documentation. The exchange's own breach exposes all of it. The records do not go back into the box. An exchange holds the passport scan, the proof of address, the source-of-funds documentation. The exchange's own breach exposes all of it. The records do not go back into the box.

Read on the desk

]]> The third-party vendor as the route in https://keremalbayrak.com/the-third-party-vendor-as-the-route-in https://keremalbayrak.com/the-third-party-vendor-as-the-route-in Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Foresight The accountant, the lawyer, the IT firm, the cleaner with a key to the office: each is a potential route into the principal's affairs. The vendor's security posture is the principal's exposure. The accountant, the lawyer, the IT firm, the cleaner with a key to the office: each is a potential route into the principal's affairs. The vendor's security posture is the principal's exposure.

Read on the desk

]]> The private school and the family record https://keremalbayrak.com/the-private-school-and-the-family-record https://keremalbayrak.com/the-private-school-and-the-family-record Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Records An institution that holds the records of a principal's children also holds the records of where the family lives, who they are connected to, and what they are likely to be photographed at. An institution that holds the records of a principal's children also holds the records of where the family lives, who they are connected to, and what they are likely to be photographed at.

Read on the desk

]]> The divorce filing and what it exposes https://keremalbayrak.com/the-divorce-filing-and-what-it-exposes https://keremalbayrak.com/the-divorce-filing-and-what-it-exposes Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth Family courts in many jurisdictions publish the outline of substantial divorces. The financial settlements, the asset disclosures, the conduct of the parties become part of a record that is permanent. Family courts in many jurisdictions publish the outline of substantial divorces. The financial settlements, the asset disclosures, the conduct of the parties become part of a record that is permanent.

Read on the desk

]]> The data broker who already has the spouse https://keremalbayrak.com/the-data-broker-who-already-has-the-spouse https://keremalbayrak.com/the-data-broker-who-already-has-the-spouse Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Records A principal removes themselves from a data broker's listings. The spouse, the children, the parents, the in-laws remain on the same broker. The aggregation around the principal continues through the family. A principal removes themselves from a data broker's listings. The spouse, the children, the parents, the in-laws remain on the same broker. The aggregation around the principal continues through the family.

Read on the desk

]]> The private banking relationship and the news cycle https://keremalbayrak.com/the-private-banking-relationship-and-the-news-cycle https://keremalbayrak.com/the-private-banking-relationship-and-the-news-cycle Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth A bank that handles the principal's affairs becomes the subject of regulatory or political attention. Investigations into the bank produce filings that name customers. The principal appears in a story they have nothing to do with. A bank that handles the principal's affairs becomes the subject of regulatory or political attention. Investigations into the bank produce filings that name customers. The principal appears in a story they have nothing to do with.

Read on the desk

]]> The leaked flight manifest https://keremalbayrak.com/the-leaked-flight-manifest https://keremalbayrak.com/the-leaked-flight-manifest Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Records Airline systems are breached or subpoenaed. Manifests showing who flew on which flight, in which seat, with which passport, surface in places the passenger did not expect. Airline systems are breached or subpoenaed. Manifests showing who flew on which flight, in which seat, with which passport, surface in places the passenger did not expect.

Read on the desk

]]> The real estate search portal https://keremalbayrak.com/the-real-estate-search-portal https://keremalbayrak.com/the-real-estate-search-portal Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Records Consumer property portals republish public land registry data and add their own enrichment. The principal's home is searchable by address, by name, and by approximate value. Consumer property portals republish public land registry data and add their own enrichment. The principal's home is searchable by address, by name, and by approximate value.

Read on the desk

]]> The supplier leak that names the customer https://keremalbayrak.com/the-supplier-leak-that-names-the-customer https://keremalbayrak.com/the-supplier-leak-that-names-the-customer Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Records A wine merchant, a security firm, a private dining club, a personal chef: each holds a customer list. Each is breached. The principal's name appears in a leaked record alongside the supplier's other clients. A wine merchant, a security firm, a private dining club, a personal chef: each holds a customer list. Each is breached. The principal's name appears in a leaked record alongside the supplier's other clients.

Read on the desk

]]> The published charitable grant https://keremalbayrak.com/the-published-charitable-grant https://keremalbayrak.com/the-published-charitable-grant Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth Significant charitable giving creates a public record at the receiving institution and often at the donor's foundation. The grant is named, the donor is named, the amount is named or strongly implied. Significant charitable giving creates a public record at the receiving institution and often at the donor's foundation. The grant is named, the donor is named, the amount is named or strongly implied.

Read on the desk

]]> The personal protection detail and the published detail https://keremalbayrak.com/the-bodyguard-and-the-published-detail https://keremalbayrak.com/the-bodyguard-and-the-published-detail Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity A principal's security arrangements are themselves a record. The firm employed, the personnel deployed, the routine of the protection: each is knowable, and each says something about the principal. A principal's security arrangements are themselves a record. The firm employed, the personnel deployed, the routine of the protection: each is knowable, and each says something about the principal.

Read on the desk

]]> The medical record and the clinic that holds it https://keremalbayrak.com/the-medical-record-and-the-leak-from-the-clinic https://keremalbayrak.com/the-medical-record-and-the-leak-from-the-clinic Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity A private clinic holds a substantial record on the principal. The clinic's systems are breached. The record surfaces in places no one would expect. A private clinic holds a substantial record on the principal. The clinic's systems are breached. The record surfaces in places no one would expect.

Read on the desk

]]> The personal cloud storage and what it quietly holds https://keremalbayrak.com/the-personal-cloud-storage-and-what-it-quietly-holds https://keremalbayrak.com/the-personal-cloud-storage-and-what-it-quietly-holds Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Identity A consumer cloud account holds a decade of photographs, scanned documents, backup of every device the principal has owned. A breach of the account is a breach of the principal's life as documented. A consumer cloud account holds a decade of photographs, scanned documents, backup of every device the principal has owned. A breach of the account is a breach of the principal's life as documented.

Read on the desk

]]> The public company board seat and the disclosure it creates https://keremalbayrak.com/the-public-company-board-seat-and-the-disclosure-it-creates https://keremalbayrak.com/the-public-company-board-seat-and-the-disclosure-it-creates Tue, 26 May 2026 09:00:00 +0000 Kerem Albayrak Wealth A director of a listed company files disclosures. The disclosures are mandatory, public, indexed by the regulator, and republished by every financial information service that tracks the company. A director of a listed company files disclosures. The disclosures are mandatory, public, indexed by the regulator, and republished by every financial information service that tracks the company.

Read on the desk

]]>