INDEXINDUSTRY TRADE ASSOCIATIONSARCHIVESCONTACT

 

 

 

Facts + Statistics:
Identity theft and cybercrime

The scope of identity theft

The 2017 Identity Fraud Study, released by Javelin Strategy & Research, found that $16 billion was stolen from 15.4 million U.S. consumers in 2016, compared with $15.3 billion and 13.1 million victims a year earlier. In the past six years identity thieves have stolen over $107 billion.

Following the introduction of microchip equipped credit cards in 2015 in the United States, which make the cards difficult to counterfeit, criminals focused on new account fraud. New account fraud occurs when a thief opens a credit card or other financial account using a victim’s name and other stolen personal information.

Identity theft and fraud complaints

The Consumer Sentinel Network, maintained by the Federal Trade Commission(FTC), tracks consumer fraud and identity theft complaints that have been filed with federal, state and local law enforcement agencies and private organizations. Of the 3.1 million complaints received in 2016, 1.3 million were fraud related costing consumers over $744 million.

The median amount consumers paid in these cases was $450. Within the fraud category, debt collection complaints were the most reported and ranked first among all 30 types of complaints identified by the FTC. They accounted for 28 percent of all the complaints reported to the FTC and 66 percent of all fraud complaints.

In 2016, thirteen percent of all complaints were related to identity theft. Identity theft complaints were the third most reported to the FTC and had increased by more than 47 percent from 2013 to 2015 but fell about 19 percent from 2015 to 2016.

 

Identity Theft And Fraud Complaints, 2013-2016 (1)

(1) Percentages are based on the total number of Consumer Sentinel Network complaints by calendar year. These figures exclude “Do Not Call” registry complaints.
Source: Federal Trade Commission, Consumer Sentinel Network.

How Victims’ Information Is Misused, 2016 (1)

Type of identity theft fraud Percent
Employment or tax-related fraud 34.0%
Tax fraud 29.2
Credit card fraud 32.7
New accounts 25.6
Other identity theft 16.0
Phone or utility fraud 13.1
Bank Fraud (2) 11.8
Loan or lease fraud 6.8
Government documents or benefits fraud 6.6
(1) Percentages are based on the total number of identity theft complaints in the Federal Trade Commission’s Consumer Sentinel Network (399,225 in 2016). Percentages total to more than 100 because some victims reported experiencing more than one type of identity theft.
(2) Includes fraud involving checking, savings, and other deposit accounts and debit cards and electronic fund transfers.
Source: Federal Trade Commission.

Top 10 Writers Of Identity Theft Insurance By Direct Premiums Written, 2016 (1) ($000)

Rank Group/company Direct premiums written As a percent of total
1 Nationwide Mutual Group $36,511 15.9%
2 State Farm Mutual Automobile Ins. 28,311 12.3
3 Travelers Companies Inc. 24,424 10.6
4 State National Companies Inc. 15,697 6.8
5 Allstate Corp. 11,816 5.1
6 American Family Insurance Group 10,576 4.6
7 Hanover Insurance Group Inc. 10,494 4.6
8 Liberty Mutual 10,490 4.6
9 Erie insurance Group 8,131 3.5
10 American International Group 7,649 3.3
  Total, top 10 $164,100 71.4%
  Total (2) $229,708 100.0%
(1) Includes stand alone policies and the identity theft portion of package policies. Does not include premiums from companies that cannot report premiums for identity theft coverage provided as part of package policies.
(2) Direct premiums written in the U.S. and its territories, Canada and other foreign territories.
Source: NAIC data, sourced from S&P Global Market Intelligence, Insurance Information Institute.

Identity Theft by State, 2016

State Complaints per 100,000 Population (1) # of complaints

 

Rank(2)

State Complaints per 100,000 population (1) # of complaints Rank(2)
Alabama 82.4 4,007 36 Montana 68.2 711 43
Alaska 96.1 713 25 Nebraska 83.1 1,584 35
Arizona 126.2 8,748 10 Nevada 135.8 3,993 9
Arkansas 77.2 2,308 39 New Jersey 111.5 9,977 16
California 139.5 54,744 4 New Mexico 96.9 2,016 24
Colorado 112.0 6,203 15 New York 102.3 20,205 22
Conneticut 137.9 4,933 6 North Carolina 96.1 9,746 26
Delaware 155.9 1,484 3 North Dakota 61.3 465 47
Florida 166.8 34,384 2 Ohio 94.8 11,009 27
Georgia 124.0 12,787 11 Oklahoma 85.1 3,337 33
Hawaii 55.2 789 50 Oregon 105.3 4,312 20
Idaho 80.1 1,348 37 Pennsylvania 109.7 14,030 17
Illinois 138.0 17,660 5 Rhode Island 115.1 1,216 13
Indiana 76.8 5,091 40 South Carolina 89.5 4,438 28
Iowa 68.1 2,135 44 South Dakota 58.1 503 49
Kansas 87.1 2,532 31 Tennessee 86.0 5,718 32
Kentucky 65.3 2,898 45 Texas 119.2 33,214 12
Louisiana 69.7 3,264 42 Utah 83.2 2,540 34
Maine 87.9 1,170 29 Vermont 62.0 387 46
Maryland 137.1 8,251 7 Virginia 104.3 8,772 21
Massachusetts 107.0 7,287 19 Washington 114.0 8,310 14
Michigan 175.6 17,430 1 West Virginia 59.7 1,093 48
Minnesota 107.2 5,919 18 Wisconsin 87.5 5,054 30
Mississippi 79.6 2,378 38 Wyoming 74.6 437 41
Missouri 136.1 8,292 8 New Hampshire 101.3 1,352 23

 

(1) Population figures are based on the 2016 U.S. Census population estimates.
(2) Ranked per complaints per 100,000 population. The District of Columbia had 198.5 complaints per 100,000 population and 1,352 victims.
Source: Federal Trade Commission, Consumer Sentinel Network.

Cybercrime

As businesses increasingly depend on electronic data and computer networks to conduct their daily operations, growing pools of personal and financial information are being transferred and stored online. This can leave individuals exposed to privacy violations, and financial institutions and other businesses exposed to potentially enormous liability if and when a breach in data security occurs.

Interest in cyber insurance and risk continues to grow as a result of high profile data breaches and awareness of the almost endless range of exposure businesses face.

A 2016 data leak, called the Panama Papers in the media, exposed millions of documents from the electronic files of Panamanian law firm Mossack Fonseka. In 2015, two health insurers, Anthem and Premera Blue Cross, were breached, exposing the data of 79 million and 11 million customers, respectively.

The U.S. government has also been the target of hackers. Recent breaches at the Federal Deposit Insurance Corp. and the Internal Revenue Service follow multiple breaches in May 2015 of the Office of Personnel Management and the Department of the Interior where the records of 22 million current and former U.S. government employees were compromised.

Cyber attacks and breaches have grown in frequency, and losses are on the rise. Breaches hit a new record in 2016, soaring to 1,093, up from 780 on 2015, but the number of records exposed fell to about 37 million from 169 million in 2015.

The majority of the data breaches in 2016 affected the business sector, with 494 breaches or 45.2 percent of the total number of breaches. Medical/healthcare organizations were affected by 377 breaches (34.5 percent of total breaches) while the education sector sustained 98 breaches (9.0 percent of all breaches) and government/military breaches totaled 72 (6.6 percent), according to the Identity Theft Resource Center.

The Center says there have been 1,140 breaches in 2017 so far (as of November 1), surpassing the 2016 record of 1,093 breaches. There were 171.6 million records exposed so far in 2017. The business sector accounted for 52 percent of the 2017 breaches and 91 percent of records exposed. These figures do not include the many attacks that go unreported. In addition, many attacks go undetected.

In 2014 McAfee and the Center for Strategic and International Studies (CSIS) estimated annual global losses from cybercrime fall between $375 billion and $575 billion.

The costs of cybercrime are growing. An annual study of U.S. companies by the Ponemon Institute cites estimated average costs at $15 million in 2015, up 21 percent from $12.7 million in 2014. These costs ranged among the 58 organizations surveyed from a low of $1.9 million to a high of $65 million each year per company.

Cyber insurance evolved as a product in the United States in the mid to late 1990s as insurers have had to expand coverage for a risk that is rapidly shifting in scope and nature.

More than 60 carriers offer stand alone policies in a market encompassing $2.75 billion in gross written premiums in 2015. By mid-2016 gross premiums written was estimated at $3.25 billion.

Number Of Data Breaches And Records Exposed, 2007-2016 (1)

Source: Identity Theft Resource Center.

Cybercrime Complaints, 2012-2016 (1)

(1) Based on complaints submitted to the Internet Crime Complaint Center.
Source: Internet Crime Complaint Center.

Top 10 States By Number Of Cybercrime Victims, 2016

Rank State Number
1 California 39,547
2 Texas 21,441
3 Florida 21,068
4 New York 16,426
5 Illinois 9,177
6 Maryland 8,361
7 Pennsylvania 8,265
8 Virginia 8,068
9 Ohio 7,052
10 Washington 6,874
(1) Based on the total number of complaints submitted to the Internet Crime Complaint Center via its website from each state and the District of Columbia where the complainant provided state information.
Source: Internet Crime Complaint Center.

Top 10 Writers Of Cybersecurity Insurance By Direct Premiums Written, 2016 (1) ($000)

Rank Group/ Company Direct premiums written As a percent of Total
1 American International Group $228,325 17.0%
2 XL Group Ltd. 160,809 12
3 Chubb Ltd. 135,559 10
4 Travelers Companies Inc. 92,189 6.9
5 Beaxley Insurance Co. 83,908 6.3
6 CNA Financial Corp. 68,476 5.1
7 BCS Insurance 55,411 4.1
8 AXIS Capital Holdings Inc. 50,273 3.7
9 Liberty Mutual 34,343 2.6
10 Allied World Assurance Co. 32,533 2.4
  Total, top 10 $939,866 70.1%
  Total (2) $1,340,976 100%

 

(1) Includes stand-alone policies and the cybersecurity portion of package policies. Does not include premiums from companies that cannot report premiums for cybersecurity coverage provided as part of package policies.
(2) Direct premiums written in the U.S. and its territories, Canada and other foreign territories.
Source: NAIC data, sourced from S&P Global Market Intelligence, Insurance Information Institutute

 

 

Click link boxes below to view advertisers website.