100 US Identities Up for Sale on Dark Web

On August 4, 2023, a significant data breach involving selling personal information on the dark web was discovered. A forum user named "GimmaRink" has posted an advertisement offering a "DI Front Back Selfie SSN Fullinfo US 100.pcs" package, which includes highly sensitive personal data.

Breach Details

Date Discovered: August 4, 2023
Forum Username: GimmaRink
Post Title: DI Front Back Selfie SSN Fullinfo US 100.pcs
Data Offered:

• Front and back images of driver's licenses
• Selfie with the driver's license
• Full Social Security Number (SSN)
• Full personal information including name, address, and financial details

Sample Data Provided:
The forum post includes images showing a woman's face, her driver's license (front and back), and a document listing her personal and financial details. The sample includes:

• Name: Shannon Paige MacCrindle
• Address: [Redacted for privacy]
• SSN: [Redacted for privacy]

Price: $32,000 for the full package of 100 records

Impact Analysis

Potential Risks:

• Identity Theft: The exposed information can be used to impersonate the victims, opening new bank accounts, applying for loans, or making unauthorized purchases.
• Financial Fraud: Detailed financial information can facilitate fraudulent activities, causing significant financial losses.
• Privacy Violations: Personal privacy is severely compromised, potentially leading to further exploitation and emotional distress.

Prevention Tips

1. Regular Monitoring: Continuously monitor your credit reports and bank statements for any suspicious activities.
2. Identity Theft Protection Services: Consider enrolling in an identity theft protection service to receive alerts and assistance in case of a breach.
3. Strong Passwords: Use strong, unique passwords for all accounts and enable two-factor authentication where possible.
4. Freeze Credit: If you suspect your information has been compromised, freeze your credit to prevent new accounts from being opened in your name.
5. Report Suspicious Activities: Immediately report any suspicious activities to your financial institutions and relevant authorities.

Threat Actor Profile

Username: GimmaRink

Forum Activity:

• Posts: 70
• Threads: 6
• Joined: August 2023
• Reputation: 20

Profile Summary: GimmaRink is an active threat actor on a dark web forum specializing in the sale of personal data. The user's recent activity includes offering a package containing front and back images of driver's licenses, selfies with the IDs, Social Security Numbers (SSNs), and full personal information of 100 individuals. GimmaRink has quickly established a reputation in the forum since joining in August 2023, indicating a high level of engagement and possible expertise in data breaches and identity theft.

Notable Activities:

• Data Sale: Advertising a comprehensive personal information set for 100 individuals, including SSNs and financial details.
• Engagement: With 70 posts and a reputation score of 20, GimmaRink is actively involved in discussions and transactions on the forum.
• Rapid Growth: Despite being a new member, GimmaRink has quickly become prominent, suggesting a potentially well-established background in cybercrime under different aliases or platforms.

Impact: GimmaRink's activities pose significant risks of identity theft, financial fraud, and severe privacy violations for the victims whose data is being sold.