Even if they do not have a data-mining strategy, most businesses have some personal customer data, and it can be valuable to thieves

Medical records do get stolen. While we cannot say for certain, it seems that there is little criminal interest in buying them.

One of the workhorses of modern internet crime is something boring and simple: a username and password.