How is a price put on a stolen database? Presumably whatever a criminal is willing to pay, which is based on the value they can extract from the personal records through some form of fraud.
Stolen Health Record Databases Sell For $500,000 In The Deep Web Electronic health record databases proving to be some of the most lucrative stolen data sets in cybercrime underground. Medical insurance identification, medical profiles, and even complete electronic health record (EHR) databases have attracted the eyes of enterprising black hats, who increasingly see EHR-related documents as some of the hottest commodities peddled in the criminal underground. A new report today shows that complete EHR databases can fetch as much as $500,000 on the Deep Web, and attackers are also making their money off of smaller caches of farmed medical identities, medical insurance ID card information, and personal medical profiles.