1.8.15 Stealing of healthcare related information is highly lucrative for the cyber criminals.

Incidentally, the data servers of the United States Postal Service (USPS) were illegally tapped into in September, but the information about the crime surfaced in November. The coordinated stealth attack was earlier estimated to have resulted in almost 800,000 USPS employees having their personal health data exposed. However, these earlier estimates were greatly exaggerated, stated Williamson.

Though the number of affected USPS employees may be almost half of earlier estimates, those affected, now have their personal details like names, dates of birth, Social Security numbers, addresses, beginning and end dates of employment, emergency contact information and other information, out in the open, available for anyone to purchase on the black-market for digital content.

Stealing of healthcare related information is highly lucrative for the cyber criminals. That is the primary reason the hackers may have targeted this particular file, shared investigators. Underground forums typically charge a dollar for a stolen credit card. This is mainly because credit card theft has a very limited validity and ‘shelf-life.’

On the other hand, health insurance credentials can fetch as much as $20 per person. Such personal details do not have any shelf-life. Moreover, multiple pieces of information help the companies who buy such data, build a comprehensive profile of their ‘target’. Another factor that makes the health insurance details valuable is that there are virtually no checkpoints to monitor their misuse. While credit monitoring facilities do have alarm systems that trigger whenever there is unusual activity on the card, data like this can be used as and how desired by the buyer.

via USPS Data Breach Was For Profit – ‘Health Files’ Fetch Handsome Figures, Indicate Investigators.