A Bloomberg investigation reveals that generative AI and autonomous agents are accelerating identity theft operations in the United States, enabling criminals to access Social Security numbers from darknet markets and create deepfake driver's licenses at scale.
Generative AI tools are transforming identity theft from scattered criminal acts into organized, efficient operations. According to the investigation, criminals now leverage AI to automate and streamline multiple stages of the theft process.
Key vulnerabilities include:
Darknet Access: Social Security numbers and other personal data are readily available on darknet markets, which AI tools can search and extract automatically without human intervention.
Deepfake Documentation: Generative AI systems can now produce convincing synthetic driver's licenses and other identity documents, replacing the need for physical document forgery.
Autonomous Agents: AI agents operating without direct human oversight can orchestrate entire theft operations, from data acquisition to document creation to account takeover.
The shift represents a significant escalation in both scope and speed. Where identity theft previously required manual effort and specialized skills, AI automation reduces friction and lowers barriers to entry for criminals. This industrial-scale approach multiplies potential victims exponentially.
The investigation highlights gaps in current defenses. Authentication systems designed around traditional documents now face threats from AI-generated alternatives that can bypass initial verification steps. Financial institutions and government agencies have not yet adapted detection mechanisms to account for synthetic identity documents.
The challenge extends beyond document forgery. Autonomous AI agents can simultaneously target thousands of individuals, coordinate across multiple platforms, and adapt to basic security measures in real time—capabilities that outpace traditional fraud detection systems built for manual attacks.
Experts cited in the investigation warn that without significant upgrades to identity verification infrastructure and AI regulation, the scale and impact of identity theft will continue accelerating. The issue sits at the intersection of three compounding problems: abundant stolen personal data, increasingly capable generative AI, and authentication systems that have not evolved to defend against synthetic threats.
The North Carolina Ports Authority confirmed a cyberattack has disrupted IT systems across its major operations. The attack affects Port of Wilmington, Port of Morehead City, and Charlotte Inland Port.
Security researchers have identified a Chinese-linked spyware operation targeting victims across 13 countries, including the United States. The discovery came after operators made a critical operational security mistake.
Artificial intelligence has revealed a long-overlooked browser security vulnerability that enterprises can no longer afford to ignore. Skyhigh Security explains why browsers have become essential control points for managing data, AI interactions, and modern work environments.