Tuesday, July 26, 2016

Black Market Medical Records

"On The Dark Web, Medical Records Are A Hot Commodity":
On the dark web, medical records draw a far higher price than credit cards. Hackers are well aware that it's simple enough to cancel a credit card, but to change a social security number is no easy feat. Banks have taken some major steps to crack down on identity theft. But hospitals, which have only transitioned en masse from paper-based to digital systems in the past decade, have far fewer security protections in place.

On the dark web, complete medical records typically contain an individual's name, birthdate, social security number, and medical information. These records can sell for as much as (the bitcoin equivalent) of $60 apiece, whereas social security numbers are a mere $15. Stolen credit cards sell for just $1 to $3. During the tour, we spotted one hacker who claimed to have a treasure trove of just shy of 1 million full health records up for grabs.

As IBM's Kuhn explained in a follow-up interview, these medical records can be leveraged for a wide variety of nefarious purposes...