Compromised Identity Exchange Systems and Methods

1 . A compromised data exchange system comprises:

a memory;

an interface to receive encrypted personal identifying information (PII);

a processor coupled to the interface and the memory, the processor configured to unencrypt the PII and re-encrypt the PII to produce re-encrypted PII data using a different encryption key for each field and to store the re-encrypted PII data as compromised data in the memory.

2 . The compromised data exchange of claim 1 , wherein the re-encrypted PII data may be disassociated into unlinked fields such that the unlinked fields of the PII data cannot be correlated by anyone other than a data originator that holds a key to map identity elements together to form a full identity.

3 . The compromised data exchange of claim 1 , wherein the PII may be received from multiple sources.

4 . The compromised data exchange system of claim 1 , wherein the processor is further configured to:

receive a PII request via the interface;

unencrypt and re-encrypt the PII request using the different encryption key for each field;

compare the PII request to the compromised data in the memory; and

determine a risk score corresponding to the PII request based in part on the result of the comparison.

5 . The compromised data exchange of claim 4 , wherein the processor is further configured to send data related to the risk score to a computing device via the interface.

6 . The compromised data exchange of claim 4 , wherein the processor is further configured to:

determine an exposure event identifier associated with the match;

determine a statistical probability of misuse of the data based on information about an exposure event corresponding to the exposure event identifier; and

determine the risk score based on the result of the comparison and based on the information about the exposure event.

7 . The compromised data exchange of claim 1 , wherein the processor is further configured to:

re-encrypt the PII request for transmission to one or more compromised companies via the interface;

receive data corresponding to matches from results determined from comparisons by the one or more compromised companies to their own data; and

determine the risk score based on the result of the comparison and based on the received data from the one or more compromised companies.

8 . A computer-readable memory device including instructions that, when executed, cause a processor to:

receive personally identifying information (PII) data from a computing device;

unencrypt the PII data

re-encrypt the PII data using a unique encryption key for each field;

compare the re-encrypted PII data to compromised data stored in a database; and

determine a risk score corresponding to the re-encrypted PII data based in part on the comparison.

9 . The computer-readable memory device of claim 8 , further including instructions that, when executed, cause the processor to send data corresponding to the risk score to the computing device.

10 . The computer-readable memory device of claim 8 , further including instructions that, when executed, cause the processor to send data corresponding to the results to a compromised PII exchange system.

11 . The computer-readable memory device of claim 8 , further including instructions that, when executed, cause the processor to:

receive local PII data from a database;

disassociate the local PII data into unlinked fields;

encrypt the local PII data using a different encryption key for each unlinked field; and

store the encrypted local PII data in the database as the compromised data.

12 . The computer-readable memory device of claim 11 , further including instructions that, when executed, cause the processor to:

receive data from a compromised PII exchange system;

unencrypt the data to produce unencrypted data;

process the unencrypted data to produce a re-encrypted version for re-transmission to at least one compromised company using a first encryption key;

send the re-encrypted version of the data to the at least one compromised company.

13 . The computer-readable memory device of claim 12 , further including instructions that, when executed, cause the processor to:

receive results from the at least one compromised company;

aggregate the results with data corresponding to the comparison; and

determine the risk score, in part, based on the aggregated results.

14 . The computer-readable memory device of claim 12 , further including instructions that, when executed, cause the processor to send the risk score to a destination device.

15 . The computer-readable memory device of claim 12 , further including instructions that, when executed, cause the processor to:

re-encrypt the unencrypted PII data using a unique encryption key for each field;

compare the re-encrypted PII data to the compromised data; and

determine results of the comparison.

16 . A compromised data exchange system comprises:

a memory;

an interface to receive encrypted personal identifying information (PII);

a processor coupled to the interface and the memory, the processor configured to:

process exposed PII data to disassociate the PII data;

encrypt the disassociated PII data; and

store the encrypted and disassociated PII data as compromised data in the memory.

17 . The compromised data exchange system of claim 16 , wherein the processor is configured to apply a unique key to each field of the disassociated PII data to produce the encrypted and disassociated PII data.

18 . The compromised data exchange system of claim 16 , wherein the processor is further configured to:

receive PII data from a computing device;

unencrypt the PII data;

selectively re-encrypt the PII data for at least one of a comparison and a re-transmission;

selectively compare the re-encrypted PII data to the compromised data; and

determine a risk score based at least in part on the comparison.

19 . The compromised data exchange system of claim 16 , wherein the processor is further configured to:

send the re-encrypted PII data to at least one compromised system;

receive results from the at least one compromised system;

aggregate the received results with results of a comparison of the re-encrypted data to the compromised data to produce aggregated comparison results; and

determine a risk score based in part on the aggregated comparison results.

20 . The compromised data exchange of claim 19 , wherein the processor is further configured to send data related to the risk score to a computing device via the interface.