Australian Identities Sold on Dark Web for as Low as $200

Severity: High (Score: 69.5)

Sources: nordvpn.com, Theaustralian.Au, Whistleout.Au

Summary

Research from cybersecurity firms NordVPN and NordStellar reveals that stolen Australian identities are being sold on the dark web for prices starting at $200. A 'fullz' package, which includes an individual's tax file number, date of birth, and address, can be purchased for around $200, while individual payment card details are available for as little as $10. The analysis covered approximately 75,000 listings on various dark web marketplaces. Criminals can easily acquire enough personal information to commit identity theft or file fraudulent tax returns. The findings indicate that Australian data is relatively more valuable compared to other countries, with a full package costing six times more than similar data from the US. Cybersecurity experts emphasize the importance of awareness and protective measures, as Australians lost over $2.18 billion to scams in 2025. Tools like NordVPN's Dark Web Monitor can help individuals check for data breaches. The report highlights the growing concern over the accessibility of personal data on the dark web. Key Points: • Stolen Australian identities sell for as low as $200 on the dark web. • A 'fullz' package includes critical personal information like tax file numbers. • Australians lost over $2.18 billion to scams in 2025, highlighting the urgency of data protection.

Key Entities

• Credential Stuffing (attack_type)
• Data Breach (attack_type)
• Phishing (attack_type)
• Australia (country)
• Japan (country)
• New Zealand (country)
• Singapore (country)
• CWE-200 - Exposure of Sensitive Information (cwe)
• CWE-287 - Improper Authentication (cwe)
• nexos.ai (domain)
• T1566 - Phishing (mitre_attack)
• Microsoft Office 365 (tool)