The black market for identity theft

A while back I looked at the maturing market dynamics of cybercrime black markets and found that as professionals have come to dominate the hacking scene, a whole series of black markets have emerged.

Where in the past a single person might execute a cybercrime from beginning to end, nowadays there is a division of labour. Some cybercriminals can focus on building exploit tool kits while someone else becomes a bot-herder, collecting and aggregating botnets (networks of remotely controlled compromised computers). The most disturbing aspect of the emergence of black markets is how they have increased the efficiency and profitability of identity theft.

If we examine various market indicators, we can see how the black markets have increased efficiency. The most obvious indicators to track are the price of the final output and the "liquidity" or the volume of trading that occurs. The price at which a fully qualified identity is sold is a good proxy for the cost of acquisition of that identity and the overall efficiency of the market. Over the past three years various researchers have provided examples of the average price of a stolen identity, ranging from US$150 to $14. Most estimates from three years ago are in the $100 to $150 range, while today we see prices around $14 to $18 per identity. While it is difficult to get accurate numbers, there is a clear downward trend that may be as big as one order of magnitude. Decreasing prices are a clear indication of an efficient market, one in which the cost to acquire a primary resource is decreased through innovation.

But what about the overall size of the market? This is harder yet to calculate, but we can use available data for a rough calculation. The California data breach notification act SB1386 compels companies to notify customers in the event of a breach of identity data. In 2006, more than 49 million identity thefts were brought to light under the law. The running total for 2007 exceeds 70 million. Of course, the identities which have been subject to disclosure are but a small percentage of the total, global identity theft problem. We're only seeing the tip of the iceberg. If only 7 million identities are sold in the black markets, then the total revenue from the first sale only would exceed $100 million. That does not count further exploitation of the identities, such as purchasing goods or withdrawing cash.

What is extremely worrying is that at that level of revenue, the black market would have the equivalent capitalization and cash flow somewhere between the third- and fourth-largest pure-play security company.

If the black market economy were to be floated on the stock market it would be valued at more than $5 billion. The only catch is that the black market for identity theft is growing at more than 60 percent year-on-year, whereas some of the leading security companies have lost value in the last year. Three years from now, the bad guys could be better capitalized than the entire security industry. Now there's a scary thought!

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Andreas M. Antonopoulos

Network World
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?