ID Theft Service Resold Access to USInfo Search Data
Summary: A Telegram service called USiSLookups has run an automated bot since at least February 2023 that returns SSN and background reports on virtually any American for $8 to $40 in virtual currency, drawing on data from a hacked account belonging to a vetted USinfoSearch client. USinfoSearch general manager Scott Hostettler acknowledged on Nov. 21 that the service gained access to a client account, and the operator, using the nickname JackieChan, said he averages about 100 lookups per day on the bot and around 400 per day via an API.
Key Takeaway: The operator says most of his customers come from SIM-swapping channels, and stolen police email accounts are enough to apply for broker access or file fraudulent Emergency Data Requests - Kodex this year flagged fake EDRs tied to compromised accounts at police departments in India, Italy, Thailand and Turkey.
Read the original at Krebs on Security ↗
- Topics
- Governance, Risk & Compliance
- Related
- Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters Cyber Risks · Nov 13, 2026AI Doesn’t Have to Go Rogue to Break the World Cyber Risks · Nov 13, 2026