Identity Threat and Assessment Prediction (ITAP)

Download the 2017 ITAP report.

Identity Threat Assessment and Prediction (ITAP) is a risk assessment tool that increases fundamental understanding of identity theft processes and patterns of criminal behavior. ITAP aggregates data on identity theft to analyze and describe identity vulnerabilities, the value of identity attributes, and their risk of exposure.

The ITAP research program provides insight into the habits and methods of identity thieves. The ITAP model discovers the identity attributes most vulnerable to theft, assesses their importance, and determines the personally identifying information (PII) most frequently targeted by thieves. In doing so, ITAP intends to offer behavioral and cognitive recommendations to thwart future identity theft crimes.

The analytical repository of ITAP offers identity solutions relevant to people, organizations, and devices across multiple domains, including financial services, consumer services, healthcare, education, defense, energy, and government. ITAP seeks to provide an unprecedented level of awareness throughout the identity threat environment. Our goal is to use ITAP to deliver actionable knowledge grounded in analyses of past threats and countermeasures, current threats and solutions, and evidence-driven forecasts.

2017 ITAP Report

The 2017 ITAP report a summary of the latest statistics and findings from the ITAP project.  Key takeaways from the report include the following:


Human Error Is An Important Driver Of Identity Crime
About 17% of the incidents were non-malicious incidents in which PII is compromised, but without malicious intent on the part of those responsible. Vulnerabilities caused by human error are frequently exploited by opportunistic hackers and fraudsters.

The Impact Of Identity Crime Is Overwhelmingly Local
Only 0.36% of the identity theft incidents spanned the whole U.S., such as the infamous Target Breach in 2013. That means that over 99% of the cases are confined to a local geographic region or victim profile.

Identity Crime Is Not Only About Dollars And Cents
Emotional distress experienced by the victims is involved in a higher percentage of incidents than financial and property loss. Emotional impact is consistently higher than other types of loss.

The Insider Threat Is Very Real
One third of the incidents analyzed were performed solely by insiders, employees of companies, and family members of individuals.  

Identity Theft Is Not Always A Cybersecurity Problem
Over half of the instances of identity theft, fraud, and abuse captured in ITAP did not involve —or at least did not  begin with— the exploitation of cyber-vulnerabilities.

Identity Crime Affects A Wide Range Of Public And Private Sectors
The top five most affected sectors are Consumer/Citizen, Healthcare and Public Health, Government Facilities, Education, and Financial Services.

Download the 2017 ITAP report.