What Your Personal Data Is Actually Worth

Your personal data has two very different price tags. To advertisers and data brokers, any single piece of it is worth pennies, but multiplied across hundreds of millions of people it powers an industry worth hundreds of billions of dollars, none of which reaches you. To criminals, the math flips: individual records are cheap, a Social Security number sells for a few dollars, but a complete identity package runs well under a hundred, and the most valuable item on the list is not your credit card, it is your medical history. Here is the real price of your information, and the one part of it you can actually control.

What is your data worth to advertisers and brokers?

Individually, almost nothing, which is exactly why it is collected in bulk. Advertisers pay tiny amounts per data point, and data brokers package consumer profiles for anywhere from cents to a couple hundred dollars each, then sell them at enormous scale. By one estimate, the average American internet user generates roughly 240 dollars a year in value for tech platforms through their data alone, while seeing none of that money directly. Stack that across the whole population and the data broker industry is worth hundreds of billions of dollars globally. The uncomfortable point is not that your data is worth a fortune on its own. It is that a fortune is being made from it, built on profiles you never agreed to and cannot see.

What is your data worth to criminals?

On dark web markets, stolen data has a surprisingly specific price list. One analysis of hundreds of real breach listings found the going rates cluster like this: a complete medical record around 300 dollars, a PIN roughly 196 dollars, a bank account number about 69 dollars, and a driver's license about 67 dollars. Credit card numbers, despite all the attention they get, sit far down the list at roughly 17 dollars each. Social Security numbers go for just a few dollars, and email addresses and phone numbers trade for under a dollar apiece. A full identity kit, sometimes called fullz, that bundles your name, address, Social Security number, date of birth, and more, typically runs 20 to 100 dollars. Cheap per record, but devastating per victim.

Why are medical records worth more than credit cards?

One word explains the whole hierarchy: revocability. You can cancel a stolen credit card in five minutes, and the moment you do, it is worthless to a thief. You cannot cancel your medical history, your date of birth, or your Social Security number. A medical record contains a durable bundle of identifying details that can fuel insurance fraud, prescription fraud, and blackmail for years, which is why it commands a premium of roughly twenty times a credit card. The lesson for protecting yourself is the mirror image: guard hardest the data you can never change, not just the data you can replace.

If my email is worth pennies, why does it matter?

Because price reflects abundance, not importance. Email addresses and phone numbers are cheap precisely because they are everywhere, not because they are harmless. Your email is the master key that unlocks password resets across your accounts, and your phone number is the thread a scammer pulls to run a reverse lookup or hijack your text codes. The cheapest data is often the connective tissue that makes the expensive data usable, which is why the pieces sitting publicly on people-search sites matter far more than their bargain price suggests.

Who is actually buying it?

Two overlapping markets. The legal one runs on advertisers, data brokers, and people-search sites that collect, package, and resell your information, mostly for marketing and analytics, and increasingly to train artificial intelligence systems. The illegal one runs on the dark web, where breached and stolen data is traded for fraud. The through line is that both markets treat you as raw material, and both are fed in part by the same public records and broker listings, described in how data brokers get your information.

Can I get paid for my data, or control it?

Realistically, there is no meaningful way for an individual to sell their own data for what the industry earns from it, and services that promise to pay you for it rarely amount to much. What you can control is supply. You cannot set the price of your data or claw back what has already been sold, but you can reduce how much of it sits publicly available for brokers to package and criminals to exploit. Removing your listings from people-search sites shrinks the freely accessible profile at the center of both markets. Those listings regenerate as brokers refresh their data, so it takes upkeep. Consumer Reports found that automated and do-it-yourself removals cleared only about 27 percent of listings, while removals handled by real people who monitor and refile reached roughly 70 percent.

Frequently asked questions

Is my data really only worth a few hundred dollars total?

The per-record prices are low, but that understates the harm. A criminal who assembles enough of your data can cause losses far exceeding what they paid for it, and the legal data industry earns from your information year after year. Low unit price does not mean low stakes.

Why do companies want data that seems so cheap?

Scale. Pennies per person becomes billions across a population, and combined data points become far more valuable than any single one. A profile that links your identity, habits, location, and finances is worth much more than the sum of its cheap parts.

Should I worry more about my medical data than my credit card?

In terms of long-term harm, yes. A stolen card is quickly cancelled, but medical and identity data cannot be reset and can be exploited for years. That does not mean ignoring card fraud, only that the data you cannot change deserves the strongest protection.

Do data-cashback apps actually pay fairly for my data?

Generally no. Any payment tends to be trivial compared with the value extracted, and you may be handing over more data in exchange. Reducing what is collected about you is usually a better trade than accepting a token payment to share more.