Back in mid-March 2024, an article by KrebsOnSecurity disclosed that the creator of the personal data deletion service Onerep was also the mastermind behind numerous people-search firms. Following the revelation, Mozilla pledged to cease packaging Onerep with the Firefox browser and gradually terminate their association with the company. However, nearly twelve months later, Mozilla is persisting in endorsing it to Firefox users.
As part of Mozilla Monitor Plus, Mozilla provides Onerep to Firefox users via a subscription model. Originally launched in 2018 under the name Firefox Monitor, Mozilla Monitor also cross-references data from the website Have I Been Pwned? to notify users of any breaches involving their email addresses or passwords.
Shortly after finalizing the partnership deal, KrebsOnSecurity penned an exposé showcasing how Dimitri Shelest, the CEO and founder of Onerep from Belarus, had established numerous people-search services since 2010, including an active data brokerage called Nuwber that vends background reports on individuals. This revelation contradicted Onerep’s motto of “We believe that no one should compromise personal online security and profit from it.”
In a lengthy declaration (PDF), Shelest admitted to still having stakes in Nuwber, a consumer data brokerage he founded in 2015 – around the same time as founding Onerep.
Onerep.com CEO and founder Dimitri Shelest, as shown on the “about” page of onerep.com.
Shelest emphasized that Nuwber has “no overlap or data-sharing with Onerep” and clarified that any other abandoned domains tied to his name are no longer under his operation.
“I understand,” Shelest conveyed, “The connection with a people search enterprise may seem peculiar from an external perspective. In reality, without delving deeply into understanding how people-search sites function initially, Onerep wouldn’t have acquired top-tier technology and a skilled team in the industry. Nonetheless, I now recognize that we failed to emphasize this adequately in the past and I am committed to improving in the future.”
Upon being questioned about the revelations, Mozilla mentioned at the time that although customer data remained secure, the external financial interests and undertakings of Onerep’s CEO did not align with their principles.
“We are presently formulating a comprehensive plan for transitioning that will ensure customers enjoy a seamless experience while upholding their interests as a top priority,” stated Mozilla publicly.
In October 2024, Mozilla issued a statement reporting that the quest for an alternative provider was experiencing delays.
“While we are actively assessing potential partners, the search for a highly adept partner that resonates with our values continues to demand time,” Mozilla articulated. “In the interim period of this quest, Onerep will serve as the primary provider, guaranteeing uninterrupted services while we pursue potential collaborators who closely align with the values and expectations of Mozilla’s user base. Thorough due diligence is being conducted to pinpoint the ideal vendor.”
When asked for an update, Mozilla reaffirmed their ongoing search for a replacement partner.
“The pursuit is still ongoing, but as of now, we have not identified a suitable substitute,” stated Mozilla in an email. “The data of our users remains secure, and given the substantial value provided by the product to our subscribers, we intend to continue offering it during this process.”
It’s a double win for Mozilla, lauded for its principled stance while maintaining ties with Onerep almost a year later. However, the prolonged quest for a viable alternative could raise questions about the personal data erasure sector itself.
It appears that Onerep has established a collaboration with another problematic people-search service: Radaris, notorious for either disregarding or failing to honor opt-out requests. Just before unveiling details about Onerep, KrebsOnSecurity released research indicating that the co-founders of Radaris were two native Russian siblings who had developed an extensive network of affiliate marketing schemes and consumer data brokering services.
Legal representatives for the Radaris co-founders threatened legal action against KrebsOnSecurity unless the article was fully retracted, contending that the founders were, in fact, Ukrainian, and that our report had unfairly linked them to Radaris’ activities. Instead, we published a subsequent investigation revealing that not only did the Russian siblings create Radaris, but for years, they circulated press releases attributing fictitious CEOs soliciting funds from investors.
Several readers shared emails they received from Radaris after attempting to erase their personal information, showcasing Radaris’ promotion of Onerep.
An email from Radaris promoting Onerep.
About Author
