Cyber-criminals are piecing together stolen identities using personal data offered freely on social networking sites, combined with sensitive information stolen from retailers. Stephen Pritchard explains why retailers need to secure more than just the perimeter to stop cyber-thieves completing the puzzle. © 2008 Elsevier Ltd. All rights reserved.