A compromised privileged password does have a monetary value on the Dark Web for a threat actor to purchase but also has a price that can be associated to an organization in terms of risk. What is the value and risk if that password is exposed and the contents it protects exposed to the wild? A database of personally identifiable information (PII) is quite valuable and blueprints or trade secrets have even a higher value if sold to the right buyer (or government).