14 DAY TRIAL // Brian Krebs says the payment card data stolen by cybercriminals from the US retailer Target is being sold at low prices compared to the period when the information first emerged on underground markets. That’s because the number of valid cards is dropping quickly.
According to the expert, shortly after the breach came to light, cards were being sold for between $26.60 (€19.42) and $44.80 (€32.71) per card on the Rescator.so website. Now, prices ranges between $8 (€5.8) and $28 (€20.4).
When the data was first put up for sale, cards had a 100% validity rate. That meant all of them could be used for fraudulent transactions. Now, the validity rate has dropped to 60%.
Many companies have rushed to replace impacted cards, so it’s becoming more and more difficult for fraudsters to find data that they can put to good use. On the other hand, Krebs has learned that there are some organizations that still haven’t replaced many of the cards.
These cards have either been reissued just before the Target breach, or they’re about to expire in the next month or so.