23 ms·
> Medical data is the most valuable and it is bought and sold daily on the Dark Web. The infosec company Trustwave published a report that valued medical record
by divbzero 6y ago
> Medical data is the most valuable and it is bought and sold daily on the Dark Web. The infosec company Trustwave published a report that valued medical records at $250 per record on the black market, while credit cards sold for $5.40 per record.
Why can medical records be sold for so much? What value do they provide to the buyers?
- swiley 6y agoAlso how is it authenticated? Could I make up garbage and sell it for $250/record?
- zentiggr 6y agoYou can, right up until you get kneecapped by a disgruntled customer.
- nitwit005 6y agoYou can bill insurance companies for fake treatments.
- octoberfranklin 6y agoAnd when you get caught, you lose your medical license. Can you really fake bill enough before getting caught to be worth burning an M.D.? I never really understood this angle. Say the insurers use a phone call to verify 1% of treatments with the patient. Say 20% of those calls are answered and produce a coherent reply. That ought to be enough to make the expected payoff negative. Either way, this problem isn't unique to the medical world. Every other industry has to prevent fraudulent invoicing.
- deleted 6y ago[deleted]
- hobofan 6y agoI assume that if you do fake billing, you wouldn't do that with your own identity, so the risk of losing a medical license isn't there.
- octoberfranklin 6y agoNobody accepts anonymous medical invoices.
- sushshshsh 6y agoBut they do accept ones with forgef credentials and redirected bank payments ^.^
- octoberfranklin 6y agoIf you can "redirect" somebody's money you don't need to bother stealing patient medical records.
- sushshshsh 6y agoThen you'd be surprised to hear about the income tax return scam back in the day where even lay people were able to achieve just that, for 2 million bucks specifically ^.^ https://www.google.com/amp/s/www.nydailynews.com/news/national/woman-arrested-falsely-claiming-2-1-million-tax-refund-article-1.1093171%3foutputType=amp https://www.google.com/amp/s/www.nydailynews.com/news/nation...
- octoberfranklin 6y agoAnd they didn't need any medical records to do it! ... which was pretty much my point. If they can steal money out of doctors' bank accounts, or redirect it on its way in, they don't need patient data. The doctors already have patients. And payments coming in. This isn't like income tax refunds where the payer pays each individual. In fact, if they have patient data, it's stupid to use it. What insurer isn't going to notice some doctor suddenly getting a thousand new patients all in the course of one week? Sorry man, it still doesn't add up. If you're equipped to do this at all you're equipped to do it without needing patient data.
- mirashii 6y agoBilling records in particular are highly sought after as they allow existing identity theft schemes, like tax return fraud, to be amplified to a much higher level. If you can find individuals who have undergone expensive treatments that will result in large tax refunds and you have access to their SSN, you can file for the tax return before they do and cash in.