Live data from Hacker News

Equifax Faces Multibillion-Dollar Lawsuit Over Hack

bloomberg.com

571–580 of 670 posts

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#571
post #17

I'd love to see the $70B number pan out (though $500 per person is less than the damages, I think) -- Equifax is a $17B company, and would presumably stop existing if that happened. On the other hand, these things always settle out of court, and Equifax certainly won't settle the suit for more than they're worth. I said it elsewhere, but I think the right response is to opt out of the class, and sue for $1000 in smal…

Does anyone have experience with this process and could share some tips, e.g. is it likely to be successful, is it open to non-citizens, how much paperwork are we talking about?

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#575

To be honest, I feel bad for the engineering team at Equifax. The vulnerability that compromised their system was a bug in an open-source Java library, Apache Struts, and security researchers only noticed it a few days ago. It seems that the Equifax team had very little time to react and update their software. In some sense, I feel that more blame should be placed on the engineers who built the highly popular open-so…

There is some debate as to which Struts exploit was used. If it was the one from Sept, 2017 then you make a valid argument. However, if the exploit used was years old then the fault clearly lies on Equifax for not keeping their servers up to date.

Also, didn't the Equifax breach happen in May, 2017? If so, I fail to see how the Sept, 2017 exploit plays into this unless it was in the wild months before it was published in Sept, 2017 - which I find hard to believe.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#576
post #563

Earlier quoted context omitted.

>Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences? This is what pisses me off - I never gave them authorization to collect information on me. I have no business relationship with these companies. To me they look a lot like parasites even when they're not giving away my data.

You often agree to this when applying for a loan or credit card.

agreeing under coercion shouldn't be considered agreement.

yes, I realize that the definition of "coercion" here is complicated and nuanced, but I feel the point stands.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#577

Earlier quoted context omitted.

In principle that's true... In reality 1. You can be shot by a cop even if you do not pose a real threat (they just need to claim they though you might have a gun, simple) 2. People are routinely kept in jail for unreasonably long time because their families cannot afford bail often on things charges are dropped for later 3. Ever hear of civil forfeiture? The whole thing is a nice story that we love to repeat to each…

> Ever hear of civil forfeiture? Yes, a process in which the government has to prove to the same standard of evidence as someone suing you. That is due process.

The difference being that the government confiscates the property while the case makes its way through court.

In practice this is a huge difference.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#578
post #495

Earlier quoted context omitted.

Fuck that, Equifax should offer free freezing for anyone affected by their breach. Charging for it is profiting from their own negligence.

Would love to hear a lawyer's take on this.

We all got two comments into this thread and decided literally anything is better than trying to deal with all the crazy legal theories and bullst going on in here.

I've just been skimming search result for lawyer... You're pretty much the only one actually asking for one...

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#579
post #331

Earlier quoted context omitted.

But then what happens if that information becomes inaccurate? (if your credit report shows credit events that aren't yours as a result of a fraud). Doesn't it become a form of defamation?

John oliver made a segment about this on how a person was denied a rental contract because one of these agencies said he was a terrorist. Like really, equifax saying "his score is pretty good, but he IS a terrorist". Sometimes correcting those things take months.

It's ridiculous, but no property management company wants to risk a fine when the cost of checking the OFAC SDN list is so small. I'm not sure if we ever saw a decline due to the OFAC list, so I could easily see it would take a long time for something that unusual to be straightened out.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#580
post #570
post #547

So everybody has been talking about "freezing" your Equifax account for a little bit of protection... Well it turns out the Equifax security freeze PIN (which is all the "secret" info an attacker needs to unfreeze it) is just the date & time: MMDDYYHHMM! https://mobile.twitter.com/webster/status/906346071210778625

But would not an attacker then have to know the exact minute that you froze your account on? If you have only a few tries to unlock your account - how would attacker possibly guess it?

525,600 possible pins for a whole year is staggeringly tiny.

1440 tries max if you know the day. 720 if you know if it was day or night. Botnet and/or proxies can do the rest

Post reply on HN