Live data from Hacker News

Cybersecurity Incident Involving Consumer Information

investor.equifax.com

401–410 of 551 posts

Re: Cybersecurity Incident Involving Consumer Information

#401

"Customers"? I'm not an Equifax customer - that is, I've never given them my name or any information, I've certainly never paid them for a service. Yet it wouldn't surprise me to learn I'm on their list. Why call me a "customer", I'm the product you sell to banks.

The linked article only mentions business customers (i.e. banks). And refers to us as consumers, which seems correct enough.

Re: Cybersecurity Incident Involving Consumer Information

#402

Earlier quoted context omitted.

You get a unique long pin code when you freeze the account. You need that to unfreeze it. There is some "recovery" procedure, I think you need a notary or something

And that unique long pin definitely isn't stored in plaintext in the next column over in their database, right?

At this point it's about doing that one thing the other 1 million won't. It might be surmountable but do you figure the adversary is going to have the incentive to surmount it?

Re: Cybersecurity Incident Involving Consumer Information

#403
Not sure if anyone else suggested this, but people should file complaints to the CFPB about this:

https://www.consumerfinance.gov/

Not just about the hack, but the fact that their "check to see if you were affected by our shit" sites include a ToS that waives your right to participate in a class-action lawsuit.

https://trustedidpremier.com/static/privacy-policy

Re: Cybersecurity Incident Involving Consumer Information

#404
post #14

Earlier quoted context omitted.

I recently did this and highly recommend IdentityTheft.gov for assistance. It has tons of great resources/guidance for dealing with identity theft and other credit issues. https://www.identitytheft.gov/

This will make a great addition to the /r/personalfinance wiki! Thanks for posting it!

clickable links.

The subreddit https://reddit.com/r/personalfinance

The wiki https://www.reddit.com/r/personalfinance/wiki/index

Re: Cybersecurity Incident Involving Consumer Information

#405

I strongly encourage anyone in the US to put a full credit security freeze on all three credit agencies. When a credit freeze is in place, you still have access to all of your existing loan accounts and whatnot (e.g. credit cards), but lenders cannot access your credit to open new accounts unless you want them to. It's not difficult nor expensive to do, and the freeze lasts until you decide to revoke it. Whenever you…

What stops the would-be identity thief from removing the freeze before opening a fraudulent account?

Re: Cybersecurity Incident Involving Consumer Information

#406
post #371

Earlier quoted context omitted.

> In no way was Alice's identity stolen - that's tautologically impossible. I see this as you being too strict with your definition of "identity". We, as people, have multiple identities. We have one with our government, another with our employer, another with our friends, another on pseudonymous websites, etc. "Stolen identity" in this sense means Alice's attributes (the ones which Big Bank uses to identify a person…

Here's a typical story. Online loan firm gives money to someone. Months later, they default, so they call who they think is the holder of the debt. That person has no clue what they are talking about. Finds out through first ever credit report they are defrauded. Victim calls loan firm, who requests lots of proof of existence as well as a police report, before they will help them. Process takes weeks. Victim finds ou…

Why are they in worse shape? A well written fb post + patreon/gofund me link or YouTube clip with a few tears shed will rectify things. Our YC 2018 submission is going to automate this process with ex DeepMind employees and some Russians. A micro celeb in every home by 2020. Just download the app and leak your data the most profitable way.

Re: Cybersecurity Incident Involving Consumer Information

#407
post #93

Suppose Alice is a "victim of identity theft". BigBank gives $10k to Fraudster as a loan, thinking that Alice is the actual recipient. Experian, Transunion and Equifax report this loan as a debt which Alice owes to BigBank. Who is the real victim? The credit reporting agencies want to convince people that the consumer is the victim, and so Alice bears the burden and risk of clearing her name. But it is the credit rep…

Agreed. Thought experiment: suppose instead that Fraudster convinced Alice that he represented BigBank, and so Alice was duped and gave her money to Fraudster thinking she was depositing into BigBank. The only thing she could expect from BigBank was politeness while explaining to her that she was duped. If it's a very friendly bank, she may tie up a manager for a couple hours, but that's it. If she keeps coming back,…

> Are we talking jail time, or just civil penalties?

Jail time could be a possibility depending on jurisdiction. In the US, a handful of states have criminal defamation statutes - https://en.wikipedia.org/wiki/Defamation#Criminal_defamation...

Re: Cybersecurity Incident Involving Consumer Information

#408
post #93

Suppose Alice is a "victim of identity theft". BigBank gives $10k to Fraudster as a loan, thinking that Alice is the actual recipient. Experian, Transunion and Equifax report this loan as a debt which Alice owes to BigBank. Who is the real victim? The credit reporting agencies want to convince people that the consumer is the victim, and so Alice bears the burden and risk of clearing her name. But it is the credit rep…

What Alice is the victim of is slander , not fraud or identity theft. The bank lent some money to someone who claimed to be Alice (though the bank only relied on the fact that that person knew Alice's SSN as proof of that fact). Then when the bank didn't get paid back, they told a bunch of credit check bureaus that Alice was a credit risk. This was a lie about Alice, which has a material impact on Alice's reputation.…

Hmm, I guess you could call it slander if the person and the dossier were perfectly interchangeable. But all the institutions know is that someone has been failing to pay back loans that were issued based on the information in a dossier. After a series of fraudulent loans to "Alice Doe, SSN 123-45-6789" (the file, not the person), when some random shows up at Yet Another State Bank and tries to take out a loan under the same credentials, the credit reporter is right to warn of the risk. They don't know if Human Alice is a risk, but Paper Alice definitely is.

Re: Cybersecurity Incident Involving Consumer Information

#409
Everything you create online will get hacked. It will eventually just be accessible in a nice query-able format in the future. Your texts with your ex, your credit reports, your taxes, your shopping habbits, will all just be public one day. I understand people have a violent reaction to this -- but it is really becoming true. Mask who you are, hide what you do, send things that self destruct.
Post reply on HN