Definition

A property offense involving unlawful taking, appropriation, retention, or control over another’s property or value. It is defined by the required intent and by value thresholds or property types where applicable. It does not include lawful claims of right or conduct that does not satisfy the required intent element. It protects ownership interests and commonly drives restitution, forfeiture exposure, and sentencing outcomes. The concept is generally stable, though value thresholds and grading schemes are revised over time.

Principle

Principle
Identity depends on control of unique personal identifiers; computer-facilitated theft leverages the scalability and reach of digital systems to harvest and misuse those identifiers without the victim's consent.

Demonstration

Demonstration
An attacker sends a phishing email that convinces targets to submit bank login credentials; the attacker then logs in to the victims' accounts, transfers funds, and applies for credit using stolen personal data.

Misapplication

Misapplication
Calling routine data aggregation, public-directory scraping, or the collection of non-identifying metadata 'identity theft' when there is no intent or use to impersonate an identifiable person.

Consequence

Consequence
Correct application supports criminal charges, restitution orders, and identity-restoration measures for victims; it also motivates stronger authentication and data-protection practices by organizations.

Reversal

Reversal
Legitimate identity verification, consented sharing of personal data, or lawful data processing for service delivery contrasts with identity theft because consent and lawful purpose are present.

Boundary

Boundary
Excludes mere data breaches without demonstrable misuse for impersonation or fraud, purely unauthorized data exposure absent fraudulent use, and activities limited to anonymized or aggregated data; statutory definitions and required intent vary by jurisdiction.

Semantic Tension

Semantic Tension
Tension arises between 'data breach' (loss or exposure of data) and 'identity theft' (active misuse of identifiers); not all breaches result in identity theft, and not all identity theft requires a large-scale breach.

Synthesis

Synthesis
Computer-related identity theft is the purposeful misuse of digital methods to obtain and exploit personal identifiers so as to impersonate another person or commit fraud, combining technological methods of acquisition with criminal intent to assume identity.