Data Breaches: Illicit Lookup Services Worsening Privacy

**Illicit search engines and data-aggregation services:** Threat actors are compiling and monetizing massive collections of leaked personal and credential data—ranging from millions to billions of records—by offering searchable interfaces and paid lookup services on the surface web, Tor, and Telegram; services include PII and SSN lookups, credential recovery, credit-card/BIN validation, stealer-log resale, and server access for bulk databases, which materially increases risks of identity theft, fraud, doxxing, and targeted attacks on organizations and individuals.