Ssn Research

Criminals can buy your SSN online for around $2 — less than a cup of coffee to go. But the damage from a stolen SSN can follow you for years.

Coveron, supported by NordLayer Intelligence, a threat exposure management platform, investigated dark web forums and private messaging channels where online criminals deal in stolen personal information. We analyzed the prices of SSNs on the dark web market, how these SSNs change hands, and what buyers do with them. We also surveyed 1,005 U.S. residents aged 18 to 74 to understand how safe Americans feel their personal data.

The findings were alarming. Social Security numbers are among the cheapest and most commonly traded pieces of personal information on the dark web. And by the time most people learn their number was stolen, criminals have had it for weeks.

1 in 4 data breaches expose SSNs

Over your lifetime, you your Social Security number with government agencies, employers, banks, and hospitals. And when they get hacked, your SSN is often part of what hackers steal. In fact, 190 out of the 733 U.S.-linked dark web databases we analyzed contained leaked SSNs — that’s roughly a quarter of them.

Much of that stolen personal data came from a single source — the MOVEit vulnerability exploited by the CL0P ransomware group, the largest driver behind the surge in leaked SSNs.

U.S. data breaches expose SSNs.

dark web posts found selling data packages with SSNs.

for a stolen SSN on the dark web.

Your SSN might be for sale — right now

Our researchers found 5,885 active posts on dark web forums and private channels offering to buy or sell data packages that include Social Security numbers. As you can see in the dark web listing example, criminals get bulk discounts — buying 100 or more stolen data packages drops the price to under $1 each.

Source: A dark web listing offering packages of stolen personal data of U.S. citizens.

How much does your SSN cost?

Social Security numbers are cheaper than you think. On the dark web, a stolen SSN can cost under $2 — less than a dozen eggs or a Big Mac. See how its price compares to the prices of things you buy every day:

Ground beef chuck (per lb)

Gasoline (per gallon)

Fresh chicken (per lb)

Social Security number

Source: Consumer Price Index (CPI), U.S. Bureau of Labor Statistics, July 2026.

Why SSN theft is so dangerous

Your Social Security number is permanent. Unlike a credit card number, you can’t cancel it and get a new one if it’s stolen. The Social Security Administration only issues new SSNs in extreme cases — like ongoing harassment or documented identity theft that has caused serious, long-term harm. Even then, the process can take months. And your old number doesn’t disappear. It stays in databases, tied to your name and history, and criminals can keep using it.

How do criminals make money from your SSN?

A stolen SSN is one of the most profitable pieces of stolen personal information a criminal can buy, because they can use it again and again. Here’s how it plays out: Someone buys your SSN for under $2, opens a credit card in your name, and runs up thousands in charges. Then they resell the same number to the criminal, who files a fake tax return and pockets your refund. One cheap purchase, multiple payouts — all at your expense.

And the misuse doesn’t stop even if you get a replacement SSN. Your old number stays in databases tied to your name, so it can still haunt you — showing up on background checks or linked to debts that aren’t yours.

What criminals do with your SSN

When criminals get your SSN, they can steal your identity — and ruin your finances and legal record. Over the past two years, our researchers uncovered 5,885 posts on dark web forums where users ways to put stolen SSNs to work. Armed with this unique identifier, they can bypass online identity verification, open crypto accounts, or apply for credit cards in your name. You may end up with debt you never took on and a wrecked credit score.

How long before you find out?

When your data is stolen in a breach, companies are required to notify you. But that notification doesn’t come right away. Our research found that the median time between a data breach and public disclosure is 50 days. In some cases, it takes more than a year. That’s months where criminals have your SSN and you don’t even know it. It’s more than enough time for them to open accounts in your name, file fake tax returns, or drain your benefits.

What personal data do Americans worry most?

We asked 1,005 Americans what personal information they’d be most concerned seeing leaked online. The answer was clear — Social Security numbers top the list.

Don’t wait to find out the hard way — use Coveron

Don’t wait 50 days to discover your credit score has crashed or there’s debt in your name. Coveron scans the dark web around the clock for your SSN, email address, phone number, and credit or debit card numbers. The moment your information shows up, you’ll know.

But Coveron doesn’t just warn you — it helps you fight back. Every alert comes with clear steps to lock down your accounts and data. And if a stolen SSN has already led to identity theft, we’re right there with you — with expert assistance and financial support.

We scan the dark web around the clock for your personal information, including your SSN, email address, phone number, and credit or debit card numbers. The moment your data shows up for sale, you get an instant alert with clear steps on how to protect yourself.

If criminals steal your identity, you get a dedicated case manager who takes the lead — handling legal issues, replacing your documents, and guiding you through the recovery process. You’re never alone in this.

Identity theft insurance

Coveron includes up to $2M in identity theft insurance to help cover the costs of recovery — so a stolen SSN doesn’t turn into a financial disaster.

This research is based on three sources: a dark web analysis, a consumer survey, and public data breach listings.

Dark web analysis . Coveron and NordLayer Intelligence by NordStellar, a threat exposure management platform, analyzed dark web forums and private messaging channels for posts buying and selling personal data packages that contain Social Security numbers. The research ran from June 2024 through June 2026, and the data was collected using the NordStellar platform. We excluded Telegram groups from the post count due to heavy spam — though our researchers noted significant automated SSN-selling activity there too.

Coveron consumer survey . The survey ran from September 2 to 10, 2025. We surveyed 1,005 U.S. residents aged 18 to 74, with quotas for age, gender, and place of residence to ensure a nationally representative sample of internet users. Fieldwork was carried out by Cint, a global technology company that operates an online marketplace for digital market research.

Public data breach listings . In the “How long before you find out?” section, we list publicly disclosed data breaches from trusted sources, such as sec.gov, powerschool.com, oag.ca.gov, ynhhs.org, mass.gov, getevolved.com, and the companies’ own websites. This data was collected on August 28, 2026.

NordLayer Intelligence by NordStellar does not capture all data breaches, since not all incidents are publicly disclosed or leaked. It also cannot find every dark web mention of Social Security numbers, given the hidden nature of the dark web.

Download assets and infographics from this research.

For interview or press inquiries, us at [email protected]