The Marketing and Sales of Stolen Data

Abstract

This chapter outlines the general practices and products offered by vendors within the 13 forums sampled that constitute markets for stolen data. The most common products sold were dumps, or credit/debit card numbers, followed by CVV data, which includes credit card numbers and the three- or four-digit pin number located on the back of the card. There were a range of prices observed for these products, and differences in the nature of products sold based on the language used within the forum and the number of complaints received against disreputable vendors. The chapter concludes with a discussion of the difference in price observed by country for multiple products offered within the markets.