The black market for identity theft

A while back I looked at the maturing market dynamics of cybercrime black markets and found that as professionals have come to dominate the hacking scene, a whole series of black markets have emerged.

Where in the past a single person might execute a cybercrime from beginning to end, nowadays there is a division of labour. Some cybercriminals can focus on building exploit tool kits while someone else becomes a bot-herder, collecting and aggregating botnets (networks of remotely controlled compromised computers). The most disturbing aspect of the emergence of black markets is how they have increased the efficiency and profitability of identity theft.

If we examine various market indicators, we can see how the black markets have increased efficiency. The most obvious indicators to track are the price of the final output and the "liquidity" or the volume of trading that occurs. The price at which a fully qualified identity is sold is a good proxy for the cost of acquisition of that identity and the overall efficiency of the market. Over the past three years various researchers have provided examples of the average price of a stolen identity, ranging from US$150 to $14. Most estimates from three years ago are in the $100 to $150 range, while today we see prices around $14 to $18 per identity. While it is difficult to get accurate numbers, there is a clear downward trend that may be as big as one order of magnitude. Decreasing prices are a clear indication of an efficient market, one in which the cost to acquire a primary resource is decreased through innovation.

But what about the overall size of the market? This is harder yet to calculate, but we can use available data for a rough calculation. The California data breach notification act SB1386 compels companies to notify customers in the event of a breach of identity data. In 2006, more than 49 million identity thefts were brought to light under the law. The running total for 2007 exceeds 70 million. Of course, the identities which have been subject to disclosure are but a small percentage of the total, global identity theft problem. We're only seeing the tip of the iceberg. If only 7 million identities are sold in the black markets, then the total revenue from the first sale only would exceed $100 million. That does not count further exploitation of the identities, such as purchasing goods or withdrawing cash.

What is extremely worrying is that at that level of revenue, the black market would have the equivalent capitalization and cash flow somewhere between the third- and fourth-largest pure-play security company.

If the black market economy were to be floated on the stock market it would be valued at more than $5 billion. The only catch is that the black market for identity theft is growing at more than 60 percent year-on-year, whereas some of the leading security companies have lost value in the last year. Three years from now, the bad guys could be better capitalized than the entire security industry. Now there's a scary thought!

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Andreas M. Antonopoulos

Network World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?