Bad guys are combining drivers’ licenses, health insurance and credit-card accounts into counterfeit documents, or “kitz,” which they then sell online, researchers said.
Brokers of stolen information are increasingly combining disparate data on consumers, verifying the information and then selling the “kitz” to others as a turnkey identity fraud service, according to researchers from managed security firm Dell Secureworks.
While run-of-the-mill U.S. credit cards sell for less than $2, health insurance credentials for less than $20 and access to compromised computers for less than $100, packaging up a complete profile of a consumer and creating a set of physical identity documents can fetch more than $1,200, Dell Secureworks said.
A full dossier on a consumer, including verified health insurance information, Social Security numbers, financial account information, bank log-in credentials and driver’s license data, sells for about $500 each, without the actual physical documents, the company said.
With all the information leaked in data breaches in the past decade, information brokers have a lot of raw material with which to work, said Don Jackson, senior security researcher with Dell Secureworks.
Identity theft has become an increasing concern among consumers. In its annual measure of security concerns of Americans, technology firm Unisys found citizens’ overall concern with security had lessened in 2013, but identity theft and credit-card theft topped the lists of worries.
And with health care becoming less affordable for the average American, the industry has suffered some of the greatest increases in fraud, according to a report published by the Ponemon Institute.
Dell Secureworks has also seen an increase in online criminals targeting health insurers and health care organizations. Along with financial institutions, health care is one of the most targeted industries, the company stated.
Yet, those are not the only types of credentials or digital data that online thieves have targeted. Game accounts also bring premium prices, according to Secureworks’ research. In fact, the online gaming accounts of the owners of premium in-game items are some of the most valuable, selling for up to $1,000, the same price as a well-funded bank account and twice as much as a high credit-limit credit card.
Dell Secureworks believes the market for stolen information is expanding, highlighted by the increase in price for many types of data. Many more sellers and middlemen have appeared in the market, Jackson said.