Stolen data on the dark web is cheaper than you might think
For just a few dollars, you can buy a stolen debit card on the dark web in just a few clicks.
A new report by Intel-owned McAfee Labs sheds some light on the going rates for data that's been software-generated or stolen by hackers.
For as little as $5, you can buy a US software-generated payment card for almost untraceable purchases. The price depends on region, with some of the most expensive items coming from Europe. For a debit card with name, address, PIN number and Social Security data attached to it for extra validity, the cost can go up to anywhere between $30 and $45.
These marketplaces aren't difficult to find, nor are they closed-wall communities for the underground bourgeois. Almost every underground marketplace has a section dedicated to fraudulent items, and these often widely differ in price.
Some sellers will offer anything from login screen information to online payment service accounts with varying balances. The size of the balance will determine the cost of the data. For balances under $1,000, you can expect to pay between $20 and $50, the report says.
Other data, like login access, can sell for a premium -- particularly enterprise data, such as universities and businesses. These prices vary depending on the kind of stolen data that's up for grabs. The report highlighted one instance of a seller who claimed to have access to critical infrastructure by posting an alleged screenshot of a French hydroelectric generator.
Perhaps the most commonly sold items are access to online services, such as HBO Go and Marvel Unlimited, with claims of lifetime guarantees and costs under $10.
"As the commercial value of personal data grows, cybercriminals have long since built an economy selling stolen data to anybody with a computer browser and the means to pay," said Intel's Raj Samani.