Stolen Data Hits Record High
The report shows that breach data available to cybercriminals increased by 43% in 2024. In comparison, 2.2 billion unique passwords were compromised in 2023. The 2024 figures now bring the total number of unique stolen passwords to 2.9 billion.
Earlier reports had estimated around 19 billion compromised credentials online, but only 1.4 billion were considered unique. The new data suggests that the real number of exposed credentials is far greater than previously believed.
Cybercriminals are selling passwords for just a few cents and credit card details for as little as $0.50. Experts warn this low cost makes cybercrime more accessible to even low-skilled attackers.
Infostealer Malware a Major Threat
The surge in stolen data is largely due to infostealer malware. These malicious tools quietly collect saved passwords and other sensitive data from web browsers, apps, and devices. They are often spread through phishing emails, fake software downloads, or dangerous browser extensions.
Although cyberattacks are happening worldwide, the United States has been hit especially hard. The report states that 20% of all breach victims in 2024 were based in the U.S. Out of the 14.5 million stolen credit card numbers, over 80% belonged to U.S. citizens.
This marks a major shift. While stolen card data from countries outside the U.S. fell by 1.6 million, U.S.-based card listings increased by 4.5 million compared to last year.
A Global Security Concern
Cybersecurity experts are warning that the current situation is more than just a technical issue — it is becoming a major societal concern. The widespread availability of stolen data is fueling a rise in identity theft, financial fraud, and ransomware attacks.
“This isn’t just a tech problem anymore. It’s a societal threat,” said one cybersecurity analyst. “We’ve allowed data breaches to become normalized, and now we are seeing the consequences.”
Experts urge both organizations and individuals to take stronger steps to protect their digital information, including using stronger passwords, enabling two-factor authentication, and regularly monitoring for suspicious activity.
SOURCE: The 420
Tags:
Cybercrime in World