What is exif data?

Exif data is a technology that contains information recorded in the metadata of digital photos. Exif data stands for Exchangeable Image File Format. This standard was created by the Japanese industry organization JEIDA. With this metadata, photographers and developers can gather information about their photos, such as location, date, time, lens used, camera settings, and more. Hackers and criminals can also use this to find out where your photo was taken.

Where do we find EXIF Data?

The data is automatically added to every photo taken with a digital camera. This means photos taken with your smartphone contain an enormous amount of information. When you take a photo with your camera, the data is automatically attached to the back of your photo. This data includes information about the location where the photo was taken, as well as the time/date, the lens that was used, and the settings used for the photo.

When posting a photo on Social Media, or when sending a photo via WhatsApp or Telegram, the metadata is stripped from the photo. These types of media ensure that your online footprint is limited. When you send a photo by email, or place a photo on your personal website, there isn't always a party protecting you, and there's a chance the metadata is still attached. Be aware of this. You never know what someone can do with your exif data. If you want to build more cybersecurity awareness yourself, read our blog about the importance of cybersecurity awareness.

Use of Exif Data

Exif Data is often used in OSINT investigations. OSINT stands for Open Source Intelligence and is used by both cybercriminals and researchers/investigators. In OSINT, public sources are consulted to conduct research into people and organizations. Think of suspected money laundering practices or a suspected risk of terrorism. Curious how criminals use OSINT? Then read our blog about how criminals use OSINT.