I'd love to see the $70B number pan out (though $500 per person is less than the damages, I think) -- Equifax is a $17B company, and would presumably stop existing if that happened. On the other hand, these things always settle out of court, and Equifax certainly won't settle the suit for more than they're worth. I said it elsewhere, but I think the right response is to opt out of the class, and sue for $1000 in smal…
Equifax Faces Multibillion-Dollar Lawsuit Over Hack
571–580 of 670 posts
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#572https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq...
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#573Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#574Next time you apply for a loan or open a credit card, ask them who they report this too. If it's Equifax, walk away.
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#575To be honest, I feel bad for the engineering team at Equifax. The vulnerability that compromised their system was a bug in an open-source Java library, Apache Struts, and security researchers only noticed it a few days ago. It seems that the Equifax team had very little time to react and update their software. In some sense, I feel that more blame should be placed on the engineers who built the highly popular open-so…
Also, didn't the Equifax breach happen in May, 2017? If so, I fail to see how the Sept, 2017 exploit plays into this unless it was in the wild months before it was published in Sept, 2017 - which I find hard to believe.
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#576Earlier quoted context omitted.
>Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences? This is what pisses me off - I never gave them authorization to collect information on me. I have no business relationship with these companies. To me they look a lot like parasites even when they're not giving away my data.
You often agree to this when applying for a loan or credit card.
yes, I realize that the definition of "coercion" here is complicated and nuanced, but I feel the point stands.
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#577Earlier quoted context omitted.
In principle that's true... In reality 1. You can be shot by a cop even if you do not pose a real threat (they just need to claim they though you might have a gun, simple) 2. People are routinely kept in jail for unreasonably long time because their families cannot afford bail often on things charges are dropped for later 3. Ever hear of civil forfeiture? The whole thing is a nice story that we love to repeat to each…
> Ever hear of civil forfeiture? Yes, a process in which the government has to prove to the same standard of evidence as someone suing you. That is due process.
In practice this is a huge difference.
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#578Earlier quoted context omitted.
Fuck that, Equifax should offer free freezing for anyone affected by their breach. Charging for it is profiting from their own negligence.
Would love to hear a lawyer's take on this.
I've just been skimming search result for lawyer... You're pretty much the only one actually asking for one...
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#579Earlier quoted context omitted.
But then what happens if that information becomes inaccurate? (if your credit report shows credit events that aren't yours as a result of a fraud). Doesn't it become a form of defamation?
John oliver made a segment about this on how a person was denied a rental contract because one of these agencies said he was a terrorist. Like really, equifax saying "his score is pretty good, but he IS a terrorist". Sometimes correcting those things take months.
Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack
#580So everybody has been talking about "freezing" your Equifax account for a little bit of protection... Well it turns out the Equifax security freeze PIN (which is all the "secret" info an attacker needs to unfreeze it) is just the date & time: MMDDYYHHMM! https://mobile.twitter.com/webster/status/906346071210778625
But would not an attacker then have to know the exact minute that you froze your account on? If you have only a few tries to unlock your account - how would attacker possibly guess it?
1440 tries max if you know the day. 720 if you know if it was day or night. Botnet and/or proxies can do the rest