Summary

Insiders who commit fraud are usually low-level employees who use authorized access during normal work hours to either steal information or modify information for financial gain. Stolen information is usually PII or customer information that is then sold to outsiders who commit the actual fraud against the victims. Information is sometimes modified for the direct financial benefit of the insider, and sometimes is done for payment by outsiders.

All of the insider crimes in the CERT database involving organized crime fit into the fraud category. Most of these involve insiders who form their own criminal enterprise, but some involve insiders being recruited by external organized crime groups. These crimes have a significant impact, with average losses of more than $4 million.