Which types of confidential information are commonly associated with on-the-dark-web data?

• A. Medical records
• B. Credit card details, passports information, SSNs
• C. Public phone numbers
• D. Business licenses

Answer: (B)

The key idea here is that the dark web marketplaces focus on data that can be quickly monetized for fraud. Items that hold high value for attackers are financial credentials and personal identity data. Credit card details, passport information, and Social Security numbers are especially prized because they enable immediate fraudulent activity—cards can be charged or cloned, passports and IDs can be used to impersonate someone, and SSNs let attackers open new accounts, apply for credit, or commit tax and other identity-related fraud. That combination is exactly what makes this data so commonly associated with dark-web exchanges.

Public phone numbers and business licenses aren’t confidential and aren’t the kind of sensitive data that dark markets specialize in selling for fraud. Medical records are highly sensitive and can appear in breaches, but they are not as routinely traded in bulk on the dark web as financial and identity data, which is why the listed items best match what’s typically seen there.