23 ms·

I would imagine complete credit card applications contain the type of information identity thieves would be willing to pay good money for.

gowld 7y ago
By now everyone's identity data is already widely disseminated, no?
- samstave 7y ago
  The old joke.. "DDon't worry, the NSA made a backup for you" But now its more like "Don't worry The 5Eyes have made back for everyone"
- Consultant32452 7y ago
  I operate under the assumption my name, address, email, social media profiles, social security number, place of birth, and mother's maiden name are all easily available in the wild. I've bought one of those online background checks before, at the very least I can be confident the info on that report is available to anyone.
NoInputSignal 7y ago
I think the point is: unless the hacker is already aware of how to sell PII of this nature and how to move "good money" then a hack like this is for naught. Reading the mistakes made in the hack itself makes me wonder if black markets and money laundering are a skill they posses.
- ryanlol 7y ago
  I think you could just sign up on one of the onion drug/fraud markets for ~$500 vendor deposit and put up a listing for those profiles at like $5-10 a pop. If you were lazy you could just hit up an existing vendor and ask them to sell your data in batches. I’m not saying this would be a good idea, but it certainly wouldn’t be very difficult.
  - dmix 7y ago
    Then Capital One will find out immediately because banks hire firms to watch darknet markets. JP Morgan discovered a breach when they found data being sold on one of those forums and that was years ago. This will just intensely increase the scrutiny of where the data came from and they'd likely be caught anyway, unless they did a very clean job security-wise. Which very few people seem to be able to do when the feds really want you. Moving to Russia or another country without extradition treaties would probably be a good first step of that plan.

gowld 7y ago

By now everyone's identity data is already widely disseminated, no?

samstave 7y ago
The old joke.. "DDon't worry, the NSA made a backup for you" But now its more like "Don't worry The 5Eyes have made back for everyone"
Consultant32452 7y ago
I operate under the assumption my name, address, email, social media profiles, social security number, place of birth, and mother's maiden name are all easily available in the wild. I've bought one of those online background checks before, at the very least I can be confident the info on that report is available to anyone.

NoInputSignal 7y ago

I think the point is: unless the hacker is already aware of how to sell PII of this nature and how to move "good money" then a hack like this is for naught. Reading the mistakes made in the hack itself makes me wonder if black markets and money laundering are a skill they posses.

ryanlol 7y ago
I think you could just sign up on one of the onion drug/fraud markets for ~$500 vendor deposit and put up a listing for those profiles at like $5-10 a pop. If you were lazy you could just hit up an existing vendor and ask them to sell your data in batches. I’m not saying this would be a good idea, but it certainly wouldn’t be very difficult.
- dmix 7y ago
  Then Capital One will find out immediately because banks hire firms to watch darknet markets. JP Morgan discovered a breach when they found data being sold on one of those forums and that was years ago. This will just intensely increase the scrutiny of where the data came from and they'd likely be caught anyway, unless they did a very clean job security-wise. Which very few people seem to be able to do when the feds really want you. Moving to Russia or another country without extradition treaties would probably be a good first step of that plan.