DARKWEB: identities for sale

A recent thread on an underground forum has revealed the sale of a database containing documents and selfies of Italian citizens. The author of the listing, known as MirrorHub, is offering around 2,500 identity “kits” at a surprisingly low price.

But what exactly does a “kit” include? It consists of highly sensitive material: selfies holding ID documents and front-and-back scans of identity cards, passports, and driver’s licenses. According to the seller, the data is “fresh,” with less than 1% of the documents expired.

What stands out most is not the volume, but the price: the entire package is being sold for about $120 less than five cents per complete identity. This highlights the ongoing devaluation of personal data in the criminal marketplace.

MirrorHub, a relatively new user with little reputation, appears to be trying to gain visibility quickly through aggressive pricing. The “bulk” sale suggests a desire to monetize rapidly, possibly acting as an intermediary for a database stolen from an Italian company.

These types of data are especially valuable for fraudulent activities tied to KYC (Know Your Customer), the identity verification process used by banks, fintech platforms, and exchanges. With thousands of complete identities, cybercriminals can create fake accounts, facilitate money laundering, or carry out large scale fraud.

The issue is not only individual, but systemic: when such sensitive data circulates freely, even widely adopted security mechanisms risk becoming ineffective. A stolen document can be reused for years, well beyond its official expiration date.

This situation raises serious questions about the sustainability of current digital verification models based on documents and selfies. In a world where data breaches are increasingly common, relying solely on visual identity may no longer be sufficient to ensure security and trust.

This also shows something else: the dark web market is still alive, active, and even thriving.