united-states
Trafficking in &quot;Stolen&quot; (Hacked) digital information (for example: bank account and passwords or Social Security numbers
<p>This question is <strong>not</strong> about the initial crime of computer hacking, but rather whether a person who acquires private data from the hacker has committed a crime.</p>

<p>There is a curious footnote in the famous Mueller report, where apparently the investigators are contemplating potential federal violations for receiving "hacked" digital data. The footnote (page 176) follows:</p>

<p><a href="https://i.stack.imgur.com/Muc2C.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Muc2C.jpg" alt="enter image description here"></a> </p>

<p>Intuitively, the average person, would anticipate that private digital information (for example banking passwords, credit card security codes, ATM and debit card passwords, etc) would fall under the notion of personal property, and thus trafficking (sale and resale) of such data would be subject to prosecution.</p>

<p>However, this footnote seems to suggest that, because the data is intangible, it is not considered stolen property, consequently non-prosecutable.</p>

<p>Have I understood this correctly?
Are there other laws that apply to digital data that has been stolen?</p>

<p>There are many state and federal laws that apply to digital data such as credit card numbers, bank account numbers, social security numbers, etc. because while that data may be "intangible" in a traditional sense - such as the difference between a hard copy letter and an email of the same text - the difference is the <em>potential monetary value</em> of a bank account or card number or full social security number-based identity.</p>

<p>See <a href="https://www.law.cornell.edu/uscode/text/18/part-I/chapter-63" rel="nofollow noreferrer">18 U.S. Code Chapter 63 - MAIL FRAUD AND OTHER FRAUD OFFENSES | U.S. Code</a> for bank fraud, wire fraud, etc. Search a relevant state for that code and laws.</p>

<p>Depending on state jurisdiction and federal law, there can be differences in simply possessing such data, selling or transferring the information and/or actually using it for fraud. But all you have to do is read the news and you'll see that bank and card fraud is very prevalent and is prosecuted.</p>

<p>Banks and credit card companies and prosecutors can't possibly go after all fraud due to manpower and simple math that makes much of it not worth the effort to pursue; much credit card and identity theft fraud is refunded to the customer and taken as a loss to the bank.</p>
