Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cybersecurity Incident Involving Consumer Information

investor.equifax.com

Post reply on HN
Print view View original

221–230 of 551 posts

Re: Cybersecurity Incident Involving Consumer Information

#221

Post by sgs1370 »

courtewing wrote: post #6

I strongly encourage anyone in the US to put a full credit security freeze on all three credit agencies. When a credit freeze is in place, you still have access to all of your existing loan accounts and whatnot (e.g. credit cards), but lenders cannot access your credit to open new accounts unless you want them to. It's not difficult nor expensive to do, and the freeze lasts until you decide to revoke it. Whenever you…

I did this about 2 years ago with all 3 of the major agencies and in addition to the benefits described in post and comments, my junk mail volume dropped considerably. I don't know if it's always the case but this did not cost me any money.

Re: Cybersecurity Incident Involving Consumer Information

#222

Post by sdenton4 »

stormcode wrote: post #122
abawany wrote: post #106

Earlier quoted context omitted.

The NYT story states that they are already offering this to affected consumers: https://www.equifaxsecurity2017.com/potential-impact/ .

I went there and used the site and guess what? It doesn't work. It just said 'Thank You!' and gave me an enrollment date. It gave me no info as to if I was one of the people affected.

The number of affected people was 143MM, which I think is numerical shorthand for "everyone we've ever known about."

Re: Cybersecurity Incident Involving Consumer Information

#223

Post by felippee »

guelo wrote: post #202

By enrolling in the free "Identity Theft Protection" you waive your right to "PARTICIPATE IN A CLASS ACTION, CLASS ARBITRATION, OR OTHER REPRESENTATIVE ACTION" https://trustedidpremier.com/static/terms What a scam!

How can they prove it was me who waived that right if the data used to identify me was breached by them and potentially publicly available? The snake is eating it's own tail here...

Re: Cybersecurity Incident Involving Consumer Information

#224

Post by dalanmiller »

guelo wrote: post #207
andirk wrote: post #34

Oddly, on their website equifax.com , they offer a solution to see if your identity is stolen by using a website created today called equifaxsecurity2017.com , which then offers the solution to 'enroll' which sends you to a website created a week ago called trustedidpremier.com . At which point you are to enter your identity information. Um.

By enrolling in the free "Identity Theft Protection" you waive your right to "PARTICIPATE IN A CLASS ACTION, CLASS ARBITRATION, OR OTHER REPRESENTATIVE ACTION" https://trustedidpremier.com/static/terms It is a scam to get people to sign away their rights to sue the bastards.

Shit. I already submitted and should've read the fine print. I need to un-enroll.

Re: Cybersecurity Incident Involving Consumer Information

#225

Post by snsr »

dwyerm wrote: post #159
juancampa wrote: post #115

Earlier quoted context omitted.

They are already offering exactly that. https://www.equifaxsecurity2017.com/

I'll bet $5 that signing up for their monitoring service comes with a class-action waiver sweetener.

> I'll bet $5 that signing up for their monitoring service comes with a class-action waiver

It does indeed.

https://trustedidpremier.com/static/terms

Re: Cybersecurity Incident Involving Consumer Information

#226

Post by thanksgiving »

pfranz wrote: post #220
adrr wrote: post #174

Earlier quoted context omitted.

Paper checks are going away. Some of the online banks don't even support them. ACH allows only 60 days to claw back the money(disputes) and with same day clearing requirement we can get rid of 2 day holds.

What are they being replaced with? Yeah, as a young renter I went years without using a check. When buying a home last year I had various inspectors during the process. After buying, I've had electricians, plumbers, contractors, locksmiths, and other consultants. I think one gave me a bill and accepted credit card. The rest preferred checks (to be fair, I didn't seek other forms). I've tried all sorts of p2p methods…

For some, it might be walmart. Previously, on hn https://news.ycombinator.com/item?id=8361329

Re: Cybersecurity Incident Involving Consumer Information

#227

Post by scott00 »

aidos wrote: post #197
bmon wrote: post #170

Earlier quoted context omitted.

I don't think it's fair to be throwing any individuals under the bus like that. There's obviously been several failures at multiple levels but the company as a whole will have to face the consequences, not just a few managers it decides to use as scapegoats.

Well, except for this: "Three Equifax Inc. senior executives sold shares worth almost $1.8 million in the days after the company discovered a security breach that may have compromised information on about 143 million U.S. consumers." https://www.bloomberg.com/news/articles/2017-09-07/three-equ...

Hah, that's actually excellent news for those hoping for criminal consequences. It might be hard to put anybody in jail for their security negligence, but to me it looks like those three have served themselves up on a platter for an insider trading conviction.

Re: Cybersecurity Incident Involving Consumer Information

#228

Post by CapnCrunchie »

Osmium wrote: post #200
courtewing wrote: post #6

I strongly encourage anyone in the US to put a full credit security freeze on all three credit agencies. When a credit freeze is in place, you still have access to all of your existing loan accounts and whatnot (e.g. credit cards), but lenders cannot access your credit to open new accounts unless you want them to. It's not difficult nor expensive to do, and the freeze lasts until you decide to revoke it. Whenever you…

Does a credit freeze stop you from accessing your free credit scores (e.g. CreditKarma, Mint etc.)?

No it won't prevent you from accessing your free credit scores.

Re: Cybersecurity Incident Involving Consumer Information

#229

Post by nightcracker »

noja wrote: post #91
eterm wrote: post #69

Earlier quoted context omitted.

Exactly. In the UK we have a National Insurance number, but it's stated over and over again that: This is not proof of identity . Anywhere it is referenced it is repeated that it should not be used as proof of identity and not given to anyone as such. SSNs should be treated the same way, but that would require a culture change. Perhaps having 150m of them 'leaked' will bring about that change. Such a change could als…

> This is not proof of identity. What is it then? I've seen it used as a quasi-password by car hire companies to access driving license history.

Do you see that thing above your post? "noja"? That's your identity. Your SSN on Hacker News.

What proves that it is you to Hacker News is what you type into the password field when you log in.

Re: Cybersecurity Incident Involving Consumer Information

#230

Post by gricardo99 »

8ytecoder wrote: post #185
courtewing wrote: post #6

I strongly encourage anyone in the US to put a full credit security freeze on all three credit agencies. When a credit freeze is in place, you still have access to all of your existing loan accounts and whatnot (e.g. credit cards), but lenders cannot access your credit to open new accounts unless you want them to. It's not difficult nor expensive to do, and the freeze lasts until you decide to revoke it. Whenever you…

Question for you: My card comes with Identity theft protection [1]. Do you think that's a good alternative to freezing credit completely? [1] https://www.discover.com/credit-cards/member-benefits/securi...

It sounds like this would alert you to potential fraud, but not prevent it from happening. You'd still have the headache of undoing the damage, although that may be easier if you find out sooner.

If you freeze your credit, it basically prevents anyone from opening any new credit under your name. The reason for this is that any lender (car, mortgage, credit card, etc...) first would want to see your credit history, to determine how credit worthy you are. If they can't do that, they will not lend.

I'm waiting for the headline one day soon that hackers were able to unfreeze people's profiles and commit fraud under these accounts anyway. It's just another database entry somewhere, which says "freeze". All these systems are vulnerable and can be penetrated.

Post reply on HN