metric_name,figure,unit,source_name,source_url,data_date,confidence_tier,notes
Active Tor relays,8000,count,Tor Project,https://metrics.torproject.org/,2025-07,High,As of July 2025
Estimated daily Tor users,2500000,users/day,Tor Project Metrics,https://metrics.torproject.org/,2025,High,Consistent across multiple measurement periods
Estimated daily .onion users,167500,users/day,Axis Intelligence calculation from Tor Project Metrics,https://metrics.torproject.org/,2025,Medium,"6.7% of 2.5M daily users; Tor Metrics estimates hidden service users at ~6.7% of total"
Unique .onion addresses,65000,count,Tor Project,https://metrics.torproject.org/,2025-2026,High,Active addresses; total registered higher
Tor Browser cumulative downloads,200000000,downloads,Tor Project,https://www.torproject.org,2024-07,High,Mid-2024 milestone
US share of daily Tor users,18.12,percent,Statista / Tor Metrics,https://metrics.torproject.org/,2024-11 to 2025-02,High,Nov 2024 – Feb 2025 average
Active darknet marketplaces,37,count,Recorded Future,https://www.recordedfuture.com,2025 Q1,Medium,Early 2025; count fluctuates with law enforcement actions
Average darknet marketplace lifespan,7.5,months,Research aggregates,Multiple,2025,Medium,2025 estimate; varies by market type and geography
Dark web as share of total internet,0.01,percent,Multiple sources,Multiple,2025,Medium,By indexed content; structural undercount
Tor users accessing hidden services (daily),6.7,percent,Tor Project Metrics,https://metrics.torproject.org/,2025,Medium,Approximate; Tor's privacy design complicates precise measurement
DNM on-chain flows (2021),2300000000,USD,Chainalysis,https://www.chainalysis.com/blog/crypto-drug-sales-darknet-markets-2026/,2021,High,Hydra alone ~$1.7B
DNM on-chain flows (2022),1500000000,USD,Chainalysis,https://www.chainalysis.com/blog/crypto-drug-sales-darknet-markets-2026/,2022,High,Post-Hydra seizure decline
DNM on-chain flows (2023),2300000000,USD,Chainalysis,https://www.chainalysis.com/blog/crypto-drug-sales-darknet-markets-2026/,2023,High,Recovery to pre-seizure levels
DNM on-chain flows (2024),2000000000,USD,Chainalysis 2025 Crypto Crime Report,https://www.chainalysis.com/blog/darknet-markets-2025/,2024,High,
DNM on-chain flows (2025),2600000000,USD,Chainalysis 2026 Crypto Crime Report,https://www.chainalysis.com/blog/crypto-drug-sales-darknet-markets-2026/,2025,High,Approximate; YoY increase despite Operation RapTor
Fraud shop inflows (2024),225000000,USD,Chainalysis 2025 Crypto Crime Report,https://www.chainalysis.com/blog/darknet-markets-2025/,2024,High,Declined YoY
Darknet market admins/vendors on-chain holdings,40000000000,USD,Chainalysis,https://www.chainalysis.com/blog/landscape-of-seizable-crypto-assets-2025/,2025,Medium,Includes accumulated holdings not just flows
US SSN price (single),1-6,USD per record,DeepStrike,https://deepstrike.io/blog/dark-web-data-pricing-2025,2025-08,High,Supply oversaturation has compressed basic identity prices
Basic PII (name + email),<15,USD per record,Multiple,Multiple,2025-2026,Medium,
US payment card with CVV,10-40,USD per record,DeepStrike / Trustwave,https://deepstrike.io/blog/dark-web-data-pricing-2025,2025-08,High,Down from $17-120 in 2020-2021
Payment card with verified $5K balance,110-120,USD per record,DeepStrike,https://deepstrike.io/blog/dark-web-data-pricing-2025,2025-08,High,Premium tier shows price floor resilience
Fullz (complete identity package),20-200,USD per record,Multiple,Multiple,2025-2026,Medium,Higher quality (credit score / country) commands premium
US passport scan,35,USD,Comparitech / Multiple,Multiple,2025-2026,Medium,Scan only; not a real document
US driver's license scan,50,USD,Comparitech / Multiple,Multiple,2025-2026,Medium,Scan only
Healthcare record value,500+,USD per record,DeepStrike / TechTarget,https://deepstrike.io/blog/dark-web-data-pricing-2025,2025,High,Cannot be canceled; highest residual utility
Corporate VPN credentials,500-3000+,USD per set,Check Point IAB Report 2025,https://www.checkpoint.com,2025,High,Initial Access Broker market; widely cited range
Corporate domain admin credentials,5000-50000+,USD per set,Rapid7,https://www.rapid7.com,2025,Medium,IAB premium tier
Average IAB asking price H2 2025,113275,USD,Rapid7,Multiple,2025-H2,Medium,"4,055% increase from H1 2025 average of $2,726"
Netflix login,4.55,USD,Multiple,Multiple,2025-2026,Medium,Streaming accounts; easily replaced
DDoS attack (hourly rate from),20,USD,SOCRadar Dark Web Report 2025,Multiple,2025,Medium,
Stealer malware subscription (monthly from),15,USD,Multiple,Multiple,2025-2026,Medium,Commoditized CaaS market
Custom phishing page,50-2000,USD,SOCRadar Dark Web Report 2025,Multiple,2025,Medium,AI tooling reduced production cost
Money laundering service,~2,percent of amount,Multiple,Multiple,2025-2026,Low,Fee model; varies by operator
Operation RapTor arrests,270,count,US Department of Justice,https://www.fbi.gov/news/stories/global-operation-targets-darknet-drug-trafficking,2025-05-22,High,Official DOJ / FBI press release
Operation RapTor assets seized,200000000+,USD,US Department of Justice,https://www.fbi.gov/news/stories/global-operation-targets-darknet-drug-trafficking,2025-05-22,High,Currency and digital assets
Operation RapTor drugs seized,2000+,kg,US Department of Justice,https://www.fbi.gov/news/stories/global-operation-targets-darknet-drug-trafficking,2025-05-22,High,Including 144 kg fentanyl/fentanyl-laced
Operation RapTor firearms seized,180+,count,US Department of Justice,https://www.fbi.gov/news/stories/global-operation-targets-darknet-drug-trafficking,2025-05-22,High,
Operation RapTor countries involved,10,count,US Department of Justice / Europol,https://www.fbi.gov/news/stories/global-operation-targets-darknet-drug-trafficking,2025-05-22,High,AT BR FR DE NL KR ES CH GB US
Personal data records on dark web (2024),703000000,records,XtendedView / Multiple,https://xtendedview.com/dark-web-statistics/,2024,Medium,
Dark web data records YoY increase,28,percent,XtendedView,https://xtendedview.com/dark-web-statistics/,2024 vs 2023,Medium,
Breach incidents involving dark web data sharing,34,percent,XtendedView,https://xtendedview.com/dark-web-statistics/,2024,Medium,Of all 2024 data breach incidents
Stolen credit card records on dark web,140000000+,records,Recorded Future,https://www.recordedfuture.com,2025,High,
Card-not-present listings with full PII,80+,percent,Recorded Future,https://www.recordedfuture.com,2025,High,
Dark web breach posts YoY increase,43,percent,Bitsight,https://www.bitsight.com,2024,Medium,
Compromised credentials in underground supply,2900000000,unique credentials,Bitsight,https://www.bitsight.com,2024,Medium,Up from 2.2B in 2023
US organizations share of dark web breach posts,20,percent,SOCRadar,https://www.socradar.io,2024,Medium,
Global average data breach cost (IBM 2025),4440000,USD,IBM Cost of a Data Breach 2025,https://www.ibm.com/reports/data-breach,2025,High,First decline in five years
US average data breach cost (IBM 2025),10220000,USD,IBM Cost of a Data Breach 2025,https://www.ibm.com/reports/data-breach,2025,High,All-time record
Healthcare sector breach cost (IBM 2025),7420000,USD,IBM Cost of a Data Breach 2025,https://www.ibm.com/reports/data-breach,2025,High,14th consecutive year highest by sector
Supply chain compromise breach cost,4910000,USD,IBM Cost of a Data Breach 2025,https://www.ibm.com/reports/data-breach,2025,High,
Dark web intelligence market size 2025 (narrow),760000000,USD,The Business Research Company via Research and Markets,https://www.researchandmarkets.com/reports/5951907/dark-web-intelligence-market-report,2025,Medium,Intelligence services only (narrowest scope)
Dark web intelligence market size 2026 (narrow),920000000,USD,Research and Markets,https://www.researchandmarkets.com/reports/5951907/dark-web-intelligence-market-report,2026,Medium,
Dark web intelligence CAGR,21.2,percent,Research and Markets,https://www.researchandmarkets.com/reports/5951907/dark-web-intelligence-market-report,2025-2030,Medium,
Dark web monitoring market size 2025 (broad),1200000000,USD,Dataintelo,https://dataintelo.com/report/dark-web-monitoring-market,2025,Low,"Broader scope including monitoring software; wide confidence interval"
Axis Intelligence CBVM (Credential-to-Breach Value Multiplier),4910,multiplier (x),Axis Intelligence Research (derived),https://axis-intelligence.com/dark-web-statistics-index/,2026-Q2,Medium,"Cross-reference: IAB credential avg floor price $1,000 (Check Point/DeepStrike) vs IBM breach cost for credential-enabled supply chain attack $4.91M. See methodology section."