July 30, 2024  – SpyCloud, the leader in Cybercrime Analytics, recently enhanced its popular tool, Check Your Exposure, with a new Consumers’ Risk Module – a free resource that gives financial institutions and other consumer-facing businesses a summary of their consumers’ darknet exposures. This information is critical to preventing fraud, combatting account takeovers, and stopping high-risk attacks tied to malware. 

This update comes as new SpyCloud research finds millions of dark web exposures over the past 12 months for the customers of the top 50 banks operating in the United States. Those key findings include:

• Over 5.9 million breach and malware exposures, which have been detected across 2,755 data sources
• Over 5.8 million stolen passwords belonging to bank customers
• Nearly 81,000 consumers using malware-infected devices to access bank accounts – each having on average 10-12 exposed data assets tied to their identity
• Over 12.9 million pieces of stolen personally identifiable information (PII), data that enables new account creation, synthetic identities, and other forms of identity fraud
• An average password reuse rate of 83%, which is 13 points higher than employees of the same organizations (70%)

“When consumers become victims of malware infections, criminals siphon their login credentials, session cookies, and more that can allow them to impersonate that user across other accounts and systems mostly undetected,” said Damon Fleury, SpyCloud’s Chief Product Officer. “SpyCloud’s rich recaptured data analysis highlights a variety of information about exposed consumers logging into financial institution domains that they wouldn’t otherwise have access to. On our website, we provide a free exposure summary and can then explore the data at a deeper level, sharing how hundreds of global businesses use SpyCloud to better prevent fraudulent transactions, account takeover, and other cyberattacks that have financial consequences to the business.” 

SpyCloud’s Check Your Exposure tool is used by thousands of business users and individuals per month. It draws on over 625+ billion recaptured darknet data assets to power its analytics. By inputting a business email, users will receive insight into high-risk malware and breach exposures tied to their business domain from the last 12 months.

SpyCloud counts among its customers two of the top five U.S. banks and the largest U.S.-based cryptocurrency exchange, along with dozens of retail and investment banks, card networks, and payment processors. Earlier this year, SpyCloud released the following solutions for financial institutions:

• SpyCloud’s Compromised Credit Card API allows financial institutions and companies who issue credit cards, gift cards, and loyalty cards to automatically monitor and detect exposed card numbers.
• Consumer ATO Prevention Zero-Knowledge API allows security and fraud teams to query user credentials for exposure while meeting compliance and regulatory requirements.

Businesses can access the free Check Your Exposure tool to check Consumers’ Risk here and take the first step in protecting their organization from malware-infected users.