By Claudio Mezzetti,  keshini muthukuda,  Haishan Yuan

We study whether data hacking of local organizations causes an increase in identity theft in the organization's local area. We use a difference in differences approach exploiting the timing of incidents of hacking and identity theft in the USA from 2015 to 2018, and estimate a fixed effects model that includes time and Core Based Statistical Area, or County, fixed effects. We find that a hacking incident in a local organization leads to 0.792 to 1.044 more identity thefts per 10,000 population in the local area the following year. The increase represents a 42% to 77% increase in the average prevalence of identity theft. We also show that among all our controls the unemployment rate is the most significant predictor of identity theft.

Mezzetti, Claudio and muthukuda, keshini and Yuan, Haishan, Crime in the Digital Age: Do Cyber Attacks Lead to Identity Theft? (April 24, 2024).

By Isabella Voce and Anthony Morgan

This study presents the results from a survey of 14,994 Australian adult computer users conducted in June 2021.

Nearly five percent of all respondents had ever experienced ransomware victimisation, while two percent of respondents had experienced ransomware in the last 12 months.

Small to medium enterprise (SME) owners were twice as likely as other respondents to have been the victim of ransomware attacks in the past year and were more likely to have paid the ransom. The prevalence of ransomware victimisation varied according to the industry in which respondents were currently employed.

Most ransomware victims did not pay the ransom. The advice given to ransomware victims was identified as the most common reason for a respondent’s decision about whether or not to pay the ransom, particularly in the case of SME owne

Statistical Bulletin no. 35. 

Canberra: Australian Institute of Criminology  2021. 17p