Live data from Hacker News

No matter what, Equifax may tell you you’ve been impacted by the hack

techcrunch.com

31–40 of 157 posts

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#31
post #28
post #18

Earlier quoted context omitted.

Not quite. They tell you you're impacted, then "helpfully" offer to sign you up for a service that will (supposedly) help to mitigate the damage. Buried in the TOS for that service is a clause that you give up your right to sue. It's a textbook scam.

A friend also told me the TOS for the monitoring includes, by default, automatic renewal of credit monitoring for a fee after the free first year.

Why am I not surprised?

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#32

So, this basically is a way for Equifax to get a mass waiver from people to make a class action lawsuit less damaging to the company. Opting out of the waiver is a long winded process of mailing a form. another funny thing is that if you sign up for their crappy product, you have to come back on a different day and complete the sign up. There wont be emails or notifications. If you forget to signup, then you have bas…

Im pretty sure lawyers would tear appart such a shitty tactic. But it will at least keep them busy.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#33

Here is a crazy alternate theory for you guys, which I think fits all the details we have so far. 1. Equifax was never hacked. 2. Equifax accidentally deleted a substantial portion of their database. 3. Come up with a system to get the information they lost back, via a "have I been pwned?" checker. 3a. If you enter your details and they are not in their database, they assume it is one of the persons they deleted, add…

If #2 is what happened, they aren't acting in their own interests by saying they were hacked. If they were hacked, that means 3rd parties have the data. If they merely deleted a database, that implies the info is gone and nobody has it.

Surreptitiously recreating a database? They can get a list of SSNs from the government, what is a user going to add to that? One of their addresses? All of their previous financial activity? What do you think the database contains?

Not to mention the idea that Equifax doesn't have backups.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#34

So, this basically is a way for Equifax to get a mass waiver from people to make a class action lawsuit less damaging to the company. Opting out of the waiver is a long winded process of mailing a form. another funny thing is that if you sign up for their crappy product, you have to come back on a different day and complete the sign up. There wont be emails or notifications. If you forget to signup, then you have bas…

This seems too overt, and related to too big an event, to work.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#35

So, this basically is a way for Equifax to get a mass waiver from people to make a class action lawsuit less damaging to the company. Opting out of the waiver is a long winded process of mailing a form. another funny thing is that if you sign up for their crappy product, you have to come back on a different day and complete the sign up. There wont be emails or notifications. If you forget to signup, then you have bas…

I'm confused. If I didn't fill out their form for TrustID, do I still need to mail some kind of form?

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#36
If you read the message, it's very noncommital. You "may have been impacted" which doesn't take a position either way.

They could issue that response regardless of what you type and cover all possibiliites.

My guess: to account for typos, they are responding with "may have been impacted" if they get a hit on either the name or SSN, not only when there is a match on both.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#37

This isn't a very rigorous test, and TC's assertion that this may be random is probably untrue given that the results seem to be consistent if you enter the same details multiple times. The idea that Equifax has implemented a random yet deterministic checking system seems beyond the pail of belief. If I had to guess, I would say that Equifax is not checking against a list of people that they know are compromised, but…

I have 5 and 7 yr old girls. To the degree that either exists with respect to the finance industry, they both exist. Neither has credit, obviously, or any interactions with a credit agency. The only people who have their SSNs are the federal government and our health care provider, which has some very strict laws about what they can do with _any_ data they have.

Equifax says the 7-yr old "may" have been affected. The 5 yr old comes back clean.

This sure looks scammy.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#38
https://trustedidpremier.com/static/terms

"As specified on the website, Your membership subscription may be subject to automatic renewal. TrustedID may, in its sole discretion, terminate this Agreement (or suspend, terminate, or otherwise restrict Your use of and access to the Product) at any time, without notice."

Not only can they renew you automatically (unclear what the renewal term is, plausibly the autorenew could obligate you with another year of service you'd have to pay for); but they can also cancel the service, and not inform you. So you're "protected". Maybe. You don't really know, nothing about it is transparent.

What we do know, is they're bad at their job of protecting consumer credit data from people who shouldn't have it. They're not to be trusted, and therefore no good reason to agree to anything they offer.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#39
post #20

I will be blunt, and I am very incensed by this. My comments ... https://twitter.com/hpcjoe/status/906549917509980160 This is an extinction level event for Equifax. They need to be disassembled, their stored data destroyed correctly and securely, their negligent officers charged. This isn't an accident. You don't surface 0.134 BILLION bits of PII without some sort of criminal level incompetence. Any organization that…

It's (unfortunately) far more likely that they'll simply re-brand as something else. For all intents and purposes, Equifax will cease to exist; except it will be exactly the same thing under a different name.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#40
post #23
post #12

Earlier quoted context omitted.

> Opting out of the waiver is a long winded process of mailing a form. I freaking hate tactics like this, so I am offering to go through the mailing process for anyone who fills out the form at https://unarbitrate.org/ . I'll pay to mail it, just because I hate this sort of thing. If you don't trust me with your data, the site also provides a way to print it and mail it yourself. But whatever it takes, I encourage ev…

Hell of a thing to do, putting your money where your convictions are.

Thanks! It's money well spent :)
Post reply on HN