Methods, systems and computer program products are provided to determine an individual's risk of being targeted by a cyberattack based on quantifying their online presence. In some embodiments, online information pertaining to an individual, accessible through the clear web (e.g., Internet) or the dark web, is identified and used to calculate a digital vulnerability (DV) score. The DV score is used to determine the susceptibility of an individual of being targeted for a cyberattack or cybercrime based upon their online presence, and may be computed based upon personally identifying information (PII) features present on clear web and deep/dark web resources.