• Welcome to our new home!

    Please share any thoughts or issues here.


Equifax Hacked - 143 Million Users Data Exposed

jllundqu

Member
Joined
May 24, 2011
Messages
7,304
Yeah that sucks. What's the point of even keeping your data like SSN secret anymore?

https://apnews.com/694a86732e074d4a97e3103b8fc42a2b?utm_campaign=SocialFlow&utm_source=Twitter&utm_medium=AP

ATLANTA (AP) — Credit monitoring company Equifax says a breach exposed social security numbers and other data from about 143 million Americans.

The Atlanta-based company said Thursday that “criminals” exploited a U.S. website application to access files between mid-May and July of this year.

It said consumers’ names, Social Security numbers, birth dates, addresses and, in some cases, driver’s license numbers were exposed. Credit card numbers for about 209,000 U.S. consumers were also accessed.

The company said hackers also accessed some “limited personal information” from British and Canadian residents.

Equifax said it doesn’t believe that any consumers from other countries were affected.
 
Well that was a major security breach fuck up. It's gonna cost them, anyone smell class action lawsuit?
 
Let's see if there's msm reports in the near future about major "identity theft" cases arising out of this...
 
Probably worth buying Symantec for a pop. They are the parent company of Lifelock.

Haha there's a Lifelock commercial on tv right now. Such a load of bullshit. "Your" credit, "your" identity, "your" credit cards, etc.
 
Equifax Breach is Very Possibly the Worst Leak of Personal Info Ever

https://yro.slashdot.org/story/17/0...possibly-the-worst-leak-of-personal-info-ever

The breach Equifax reported Thursday is very possibly is the most severe of all for a simple reason: the breath-taking amount of highly sensitive data it handed over to criminals. Dan Goodin of ArsTechnica writes:

By providing full names, Social Security numbers, birth dates, addresses, and, in some cases, driver license numbers, it provided most of the information banks, insurance companies, and other businesses use to confirm consumers are who they claim to be. The theft, by criminals who exploited a security flaw on the Equifax website, opens the troubling prospect the data is now in the hands of hostile governments, criminal gangs, or both and will remain so indefinitely. Hacks hitting Yahoo and other sites, by contrast, may have breached more accounts, but the severity of the personal data was generally more limited. And in most cases the damage could be contained by changing a password or getting a new credit card number. What's more, the 143 million US people Equifax said were potentially affected accounts for roughly 44 percent of the population. When children and people without credit histories are removed, the proportion becomes even bigger. That means well more than half of all US residents who rely the most on bank loans and credit cards are now at a significantly higher risk of fraud and will remain so for years to come. Besides being used to take out loans in other people's names, the data could be abused by hostile governments to, say, tease out new information about people with security clearances, especially in light of the 2015 hack on the US Office of Personnel Management, which exposed highly sensitive data on 3.2 million federal employees, both current and retired.

Meanwhile, if you accept Equifax's paltry "help" you forfeit the right to sue the company, it has said. In its policy, Equifax also states that it won't be helping its customers fix hack-related problems.

Bloomberg reported on Friday that a class action seeking to represent 143 million consumers has been filed, and it alleges the company didn't spend enough on protecting data. The class-action -- filed by the firm Olsen Daines PC along with Geragos & Geragos, a celebrity law firm known for blockbuster class actions -- will seek as much as $70 billion in damages nationally.
 
Seriously... If you add up all the major breaches that have happened in recent past, there isn't a person left in the country that doesn't have ALL their personal/banking info on the web for sale somewhere.

Your Credit/Debit Cards
Your SSN
Your DOB
Your Medical History
Your Credit History
Your Bank Accounts
Your Retirement Accounts

It's ALL been breached.
 
70 billion divided by 143 million minus attorney fees equals about 20 bucks per person.... hehe

Ya but most people will probably signup for their 1 year free service..

I didn't know people's SS changed every year.
 
They call us Equifax "customers",
but those credit reporting agencies collect (steal) all that info (even if erroneous) that we don't really give them ourselves, usually.
 
[h=1]PSA: no matter what, Equifax may tell you you've been impacted by the hack[/h]
In what is an unconscionable move by the credit report company, the checker site, hosted by Equifax product TrustID, seems to be telling people at random they may have been affected by the data breach.
I started noticing most people who'd tested out the site in my Facebook and Twitter feeds had been given the message that they may have been part of the millions who's information was affected. It stood to reason that was likely, given the scope of the leak would affect possibly one out every two people I know in the country.
However, I then decided to try it out for myself. First, I entered my real information...and received the bad news.
c197a09bdc5e02543f2378b72bbefcd0
View photos



"Based on the information provided, we believe that your personal information may have been impacted by this incident," the site said.
I was then encouraged on the next line to continue my enrollment in TrustedID Premier. I was not aware I was enrolling in anything simply by giving my information. I had been instructed to add my last name and the last six digits of my Social Security number only to find out if I'd been impacted.
So then I decided to test the system with a different last name and six random numbers. I used the more popular English spelling of my last name for this purpose, entering "Burr" instead of "Buhr" and entered six random numbers I don't even remember now.
8ae4ccca78b6a95014517ff55812ab81
View photos



Sure enough, this made-up person had also been impacted. I tried it over and over again and got the same message. The only time I did not get the message I'd been impacted was when I entered "Elmo" as the last name and "123456" as my Social Security number.
Some of my colleagues also tried to fool the system and came up with different outcomes. Sometimes, after entering a made-up name, the site said they had been impacted. A few times it said they were not.
Others have tweeted they received different answers after entering the same information.
The assignment seems random. But, nevertheless, they were still asked to continue enrolling in TrustID.
What this means is not only are none of the last names tied to your Social Security number, but there's no way to tell if you were really impacted.
It's clear Equifax's goal isn't to protect the consumer or bring them vital information. It's to get you to sign up for its revenue-generating product TrustID.

More at: https://finance.yahoo.com/news/psa-no-matter-equifax-may-010153057.html
 
The last I knew the law says any credit card breach could be a fine of up to $10,000 each. When that went into effect I stopped housing my customer's credit cards and went with a 3rd party.

Since then all these big breaches have only paid a few bucks per card. They must keep those laws on the books for the little companies.
 
[h=1]
It's clear Equifax's goal isn't to protect the consumer or bring them vital information. It's to get you to sign up for its revenue-generating product TrustID.

More at: https://finance.yahoo.com/news/psa-no-matter-equifax-may-010153057.html

Or to get you to agree to some change in legal terms of credit use. Perhaps both. They stick stuff into the Agreements, knowing people will be spooked by the news and won't read the Agreement they are binding themselves to. I'll go read the Agreement to see what fresh fuckery is in it. Definitely not agreeing to it though!

eta: I didn't notice anything too egregious, though the terms do require that "You" again accept that the information contained in the report is "you", instead of the truth that the all capital letter name and SS# are not you at all and are instead various bank and government property.
 
Last edited:
It was bound to happen. And worse will no doubt, progress sucks and the digital age sucks on a whole new level.
 
Funny how the Equifax bosses all sold millions in stock before the info went public, then they have the balls to say 'it's not related'
 
Back
Top