Hackers are selling off user information at rates of $1,000 per record, researchers at Dell have found.
The company's SecureWorks subsidiary said that as hackers collect vital information on users, a trade in other data has emerged among cyber criminals.
Hackers are not only harvesting account credentials but are now looking to bundle information as full packages, referrred to by hackers as “fullz”.
The kits are said to include multiple forms of user identification, including social security numbers.
SecureWorks said in its report: “A number of these marketplaces are serving as a one-stop shop for identity theft and fraud. Not only are they selling the stolen credentials, but they also sell the supporting (counterfeit) documentation or 'dox' for an extra charge.”
According to the researchers, the kits include user information ranging from social security and health insurance data to driving licence information, addresses and social security numbers. Such packages have been sold between hackers for prices of up to $500.
Meanwhile, data drops, which include online gaming accounts, have been sold for even higher prices, fetching costs of up to $1,000 when online gaming accounts such as PlayStation Network and Xbox Live credentials have been included.
Dell SecureWorks counter threat unit researcher Don Jackson said: “Our CTU researchers discover caches of stolen data frequently, and we have found that the hackers will steal anything they think they can sell on the underground.
“Health insurance credentials continue to rise in value as we see the cost of health insurance and the cost of medical services continues to rise.”
Why does Facebook store "my entire call history with my partner's mum", asks developer who requested his Facebook data
Facebook database included text-message metadata - despite not using Facebook Messenger for SMS
Before Ocado could start selling the technology it had developed to other retailers, it had to tear down and rebuild its own monolithic architecture
Successful attack could result in harm to patients and financial loss, warns NHS governing body
Guccifer 2.0 claimed to be a lone Romanian hacker - until a schoolboy error gave him, her or them away