Liam didn't hear it, but his phone buzzed relentlessly on the nightstand. It wasn’t a message from a friend. It was an automated security alert from his primary email provider: “New login detected near Moscow, Russia. If this was not you, please change your password immediately.”

Two receipts from a digital gaming storefront for "gift card" purchases.

Liam wasn't the victim of a complex, targeted cyber attack. He hadn't clicked on a phishing link, and he hadn't downloaded a virus. He was simply a line item in a file uploaded to a dark web forum just a few hours prior, titled: Download x150 Accounts.txt .

As Liam sat on the edge of his bed, the panic set in. He didn't just have to cancel his credit card. He now faced a grueling, stressful day of logging into dozens of websites, desperately trying to change his passwords and enable two-factor authentication before the automated bots on the other side of the world locked him out of his own digital life forever.

The file was only a few kilobytes in size, but for Liam, it changed everything.