bits n pieces spells bad news |
said by Name Game:
They are my bank and I feel safe
I would too if I banked with them.
It's not as if the data exists in a vacuum though.
*If* the data is being used maliciously it will be merged on the black market with other PII data that's been harvested either legally or illegally to create a more detailed profile of an individual.
The more detailed a profile, the more $ it will sell for on the black market.
For general information...
Some of the PII items available for sale on the ID black market are:
An SSN/DOB (record will sell for a buck)
A CC # with exp (will sell for 1-20 dollars depending on certain factors).
An email address w/password (.50cents)
Along with other records, when put into a composite of an individual the record becomes known as a "full" or more commonly a "fullz"
What is generally expected to be included in a high quality "fullz"?
*********
First Name and Middle Initial :
Last Name :
Address :
Address 2 :
Apartment/Suite # :
City :
State :
Country :
ZipCode : 3
Country : US
Phone :
Birth Date :
Mother's Maiden Name :
Social Security Number :
Credit Card Information :
*********
Payment type : Debit
Card Type : VISA
Credit Card Number :
Exp. Date :
Name On Card :
Cvv2 :
Account Information :
*********
Email Address :
Password :
Account Security Question :
Answer :
*****This "fullz" data is the Holy Grail of the ID theft industry.
It's an example of how the total is greater than the parts.
Sellers want them to commad higher selling prices, buyers want them for higher value ID thefts.
As the image shows - $70 for a single "fullz"
It's a bargain to the buyer, in the right hands the data can be turned into a financial bonanza in a matter of hours.
Short story: Look beyond abuse @ a TD Bank account because the potential for that PII to be abused elsewhere is huge.