‘Dark market’ websites

by Tony Neate on April 28, 2010

All that is new and shiny in the world of information security and cyber crime was on show at InfoSec Europe this week.  One of the many education sessions on offer dealt exclusively with the current value of fraudulently acquired data traded on ‘dark market’ websites.  Facilitated by Marcus Alldrick of Lloyds, a panel of experts including Martyn Croft (Salvation Army), Geoff Harris (ISSA) and Michael Paisley (Santander) gave their views on how much criminals can expect to sell stolen personal data for on the black market. 

Financial details and medical records were accorded the highest values by the audience in a mock auction between ‘victims’ and villains’, with the average quoted price currently at £2.50 per record.  However other types of personal information such as family photographs, commercially sensitive information and school application forms were given values of up to £400,000 due to the willingness of criminals to employ extortion and blackmail tactics to make money.  The market in personal data is growing and many criminal gangs are earning millions from the trade, facts that underline the importance of protecting information online and keeping yourself safe. 

We all want to use and enjoy the internet but this education session reinforces the fact that what we value as sensitive and personal is valued very differently by criminals looking to exploit your information for material gain.

{ 2 comments… read them below or add one }

Pauline Hughes April 30, 2010 at 9:40 am

I am interested to gain information onhow to keep my pc secure

Johnc June 4, 2010 at 11:11 am

Hi
Trying to find out if the data protection act is any use.
If you buy goods on line give your bank details the web sites usally have ssl encryption so it can not be seen by other people while in transsit.
But a web site (that links out to ie to Paypal to acept payment) asks for your age, name, address, telephone no, and other personal detail to regsiter on the web site and does not have ssl encryption so your details can be seen while in transit and this seems not to break the data protection law of the uk.
How is this work or do I have it wrong
Thank you for your time
Johnc

Leave a Comment

Previous post:

Next post: