As cited
Copy frozen at (site build).
Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs
Rapid7 researchers identified 476 instances of compromised Social Security Numbers (SSNs) belonging to corporate executives traded across three dark web marketplaces (Xilo, Bankomat, and PeopleFinder) since early 2026, with 73% targeting top-level leadership. SSNs retain permanent value for identity fraud, synthetic identity creation, and executive impersonation attacks, unlike payment cards that can be cancelled. The report documents how these marketplaces operate as searchable storefronts, pricing SSN records between $0.25 and $4 per record, and recommends organizations monitor executive exposure on dark web channels and pursue takedown options where available.
Why it matters: Security and executive protection teams must identify and monitor compromised executive SSNs on dark web marketplaces before threat actors weaponize them for identity fraud, business email compromise, or corporate espionage targeting the individual and the organization.
- Source published
- First seen by Cybersecurity Tracker