How Effective is Credit Card Information Theft?

[jedishrfu]

Without getting caught and being able to use this information? Are you sure about that? Why aren't there more people doing it then?

When one learns of the dark web ways, @PeroK is correct. Some hackers steal the information and then put it up for sale on the dark web. Other folks buy it and begin the process of actual theft. This makes it near impossible to track down the original hacking group.

Also this is how the pwn websites work to help you determine if your password/identifying info was stolen and should be changed.

 

[jack action]

Lots of people are! This literally happens on on a daily basis. Of course it is not always credit card information; usually it is just stolen password files that are then decrypted and the information used to access peoples e-mail and social media accounts (because people tend to re-use usernames and passwords). This is how many targeted phishing attacks are done.

They steal the info, but how do you know if they are using it?

Where I live, a few years ago, there's been a major data breach from the largest financial institution in my province: personal information of 2.9 million accounts. including business accounts. We're 8 million people, do the math, pretty much anyone in the province was affected, including me.

Big panic at the time. Lots of blame thrown around. Free credit-monitoring protection was offered by the financial institution (which was a big mess for people trying to get it). Personally, I did nothing. Like many I guess.

How skilled was the hacker? An ordinary employee just downloaded the info and sold it over a period of 15 months. Apparently, the buyers were small financiers trying to find potential clients.

Years later, not only has the effects of this data breach hasn't made the news in any way shape or form, but I never heard of a single person being victimized. Easy to get the info, not so easy to use it.

The true victim? The institution itself which had to deal with the fear and panic of its clients. Contacting every member personally to reassure them. And the public relations nightmare! The institution's president was in the news every day for days, if not weeks. A class action was even launched against them. How much do you think it all cost them? And for what? A small [unethical] marketing stunt to find potential clients?