A new report warns that personal data used in cybercrime is increasingly being sourced from legal data broker websites rather than only from illegal underground markets. The report says many data brokers collect information that is available through public or commercially accessible channels, then compile and sell it to other businesses. While the transactions can be legal, the report argues that the resulting datasets can still be used by criminals. It claims hackers use these sources as intelligence for targeted scams and fraud, potentially enabling attacks that steal money from individuals. The report also contrasts the traditional view that cybercriminals mainly rely on the dark web with a more recent pattern: gaining actionable information through mainstream, sanctioned data brokerage services. Overall, the report highlights the risks of large-scale personal data trading, noting that legal supply chains can still feed cybercrime when data is reused beyond its original context. The report calls for greater attention to how personal data is collected, shared, and accessed across the data brokerage ecosystem.