Rapid7 tracks dark web marketplaces selling executive SSNs

Rapid7 has published research into dark web marketplaces trading the Social Security numbers of corporate executives. The company’s telemetry identified 476 compromised SSN records affecting 395 individuals since early 2026, with over 73% targeting top-level leadership.

The research profiles three marketplaces, Xilo, Bankomat and PeopleFinder, which together account for 81.5% of the executive SSN leaks in the dataset. Rapid7 recommends that organisations monitor executive exposure on the dark web, use removal options where available, and reduce executives’ public digital footprint.