Identity theft is defined as the fraudulent acquisition and use of a person's private identifying information, usually for financial gain. Which statement best matches this definition?

Identity theft is defined as the fraudulent acquisition and use of a person's private identifying information, usually for financial gain. Which statement best matches this definition?

• A. A legitimate process of applying for credit with consent
• B. The fraudulent acquisition and use of a person's private identifying information, usually for financial gain
• C. Accessing public records to verify identity
• D. A simple password reset request

Answer: (B)

Identity theft centers on stealing someone’s private identifying information and using it to commit fraud, usually for financial gain. Private identifying information includes things like full name, date of birth, Social Security number, driver’s license number, account numbers, and even login credentials. Attackers obtain this data through breaches, phishing, card skimming, stolen mail, or other social engineering, then use it to open new accounts, incur charges, or apply for loans in the victim’s name. A legitimate process of applying for credit with consent is not theft, so it doesn’t fit. Accessing public records to verify identity is a normal, lawful activity and not theft. A simple password reset request is not inherently fraudulent or theft by itself. The statement that matches the definition is the one describing the fraudulent acquisition and use of private identifying information for financial gain.

Identity theft centers on stealing someone’s private identifying information and using it to commit fraud, usually for financial gain. Private identifying information includes things like full name, date of birth, Social Security number, driver’s license number, account numbers, and even login credentials. Attackers obtain this data through breaches, phishing, card skimming, stolen mail, or other social engineering, then use it to open new accounts, incur charges, or apply for loans in the victim’s name. A legitimate process of applying for credit with consent is not theft, so it doesn’t fit. Accessing public records to verify identity is a normal, lawful activity and not theft. A simple password reset request is not inherently fraudulent or theft by itself. The statement that matches the definition is the one describing the fraudulent acquisition and use of private identifying information for financial gain.