59.4 million payment cards were compromised and posted for sale on the dark web in 2022 with 77 percent of these card compromised in the Card Not Present (CNP) channel and 70 percent of card compromised representing card issuers in the United States.
The total number of compromised and for-sale payment cards was down 38 percent from 96 million cards in 2021. Cards compromised in digital channels, however, declined at a slower pace, down 24 percent year-over-year.
The war in Ukraine and a Russian crackdown on domestic cybercrime were attributed with causing the slowdown in dark web payment card posting as many bad actors based in Russia and Ukraine were less able to commit these crimes. Malware infections that targeted eCommerce sites, primarily via the Magecart e-skimmer, were able to make up this ground by infecting 9,290 eCommerce domains over the course of the year. By the end of 2022, nearly 2,500 eCommerce domains remained infected.
For more information: