As consumer habits have changed, so have cyber criminals’ strategies. Personal data is widely available and it gets into the wrong hands, the aftermath can be hugely detrimental to the victim.
How personal data theft has changed
When it comes to personal data theft, criminals will follow the money. Ten years ago, this meant stealing credit and debit card information to make unauthorized purchases and using stolen Social Security numbers to create new identities and open lines of credit.
Today, seemingly harmless details like email addresses and passwords, a mother’s maiden name and date of birth, even high school mascots and pet names are valuable to an identity thief. A mother’s maiden name or high school mascot can help answer security questions to reset a password. An email address or password can provide access to an online bank account.
The methods of personal identity theft have changed as well. Before the advent of online banking, ecommerce and social networks, the typical method of personal identity theft was stealing information from a wallet or purse, filing a change of address form with the post office to divert and secure credit card applications – low tech methods with minimal returns.
In 2013, identity theft is one of the fastest growing crimes in the U.S. According to Javelin Strategy and Research, some 12.6 million Americans were victims of identity theft in 2012 – roughly one million more than 2011. 2013 numbers are on track to be even higher.
To better understand this crime, it helps to understand what personal data is worth to an identity thief. The average identity thief doesn’t steal data to use for him or herself. In most cases, they take the personal information and sell it on the online black market. It can be surprising what an individual’s personal information is worth.
Based off of what we’ve seen at CSID, a credit card number, name and date of birth can sell for $13. A Social Security Number can go for $20. A bank account with a balance of $10,000 goes for an average cost of $625. Even the value of a person’s social media account has worth. According to RSA, 10,000 followers on Twitter sell for $15. 1,000 likes on Facebook sell for $15.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.