Data Breaches and Sim Swap Scams: How Leaked Information Fuels Global Cybercrime

The article explores how the rising frequency of data breaches enables cybercriminals to carry out increasingly sophisticated scams, using real-world cases from the UK and abroad. British victim Sue Shore suffered a devastating Sim swap attack when scammers convinced her mobile provider to issue them a new SIM card. This allowed them to take over her phone number, access her Gmail and bank accounts, and even send disturbing messages through her WhatsApp groups. Investigators found her data had been leaked in previous breaches, including PaddyPower (2010) and Verifications.io (2019), revealing how stolen information can be recycled years later to commit new crimes.

Another victim, Fran from Brazil, discovered her Netflix account hijacked by an unknown user. Her email address had been exposed in multiple incidents such as Internet Archive (2024), Trellov (2024), and Wattpad (2020), highlighting how even common entertainment accounts are vulnerable. Leah, a UK business owner, had her Facebook ad account compromised after falling for a phishing email that mimicked Meta communications. Hackers used data from past breaches, including Qantas (2025), to combine private and public info for targeted attacks.

The report underscores that mass data breaches—like those affecting The Co-op, Marks & Spencer, and Harrods in 2025—fuel a global cybercrime market. Despite the scale of the problem, most companies offer limited compensation or support to victims, leaving individuals to bear the brunt of financial and emotional losses. Experts warn that stolen data remains valuable for years, enabling fraud, extortion, and further hacking.