"(Theft of personally identifiable information) is not a new standard of crime, it is a means," he said. "It requires a different skill set by investigators."
The FBI and other crime-fighting agencies are aided by organisations such as IC3 (Internet Crime Complaint Center) and other organisations, Mershon said.
Corporations are less likely to report cyberattacks, fearing the loss of sensitive corporate information in the process, he said.
"We do have an issue with underreporting of cyberattacks in the corporate world," he said. "We work very, very closely with the corporate world to hold corporate secrets very close to us."
Click here to email Frank Washkuch Jr.