Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

No matter what, Equifax may tell you you’ve been impacted by the hack

techcrunch.com

Post reply on HN
Print view View original

111–120 of 157 posts

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#111

Post by otakucode »

mortenjorck wrote: post #106
hpcjoe wrote: post #20

I will be blunt, and I am very incensed by this. My comments ... https://twitter.com/hpcjoe/status/906549917509980160 This is an extinction level event for Equifax. They need to be disassembled, their stored data destroyed correctly and securely, their negligent officers charged. This isn't an accident. You don't surface 0.134 BILLION bits of PII without some sort of criminal level incompetence. Any organization that…

While I certainly agree in spirit, Equifax is, as has been said elsewhere, unfortunately too big to fail. Too much infrastructure has been built around it. So, instead of dissolution, I propose two very reasonable remedies that I would consider the absolute minimum in concert with whatever fines and sanctions may be levied: 1. Credit freezes/unfreezes must be offered free in perpetuity. “They cost us money to perform…

Why 10 years? I mean, I don't see how one could defend any term shorter than the term of the validity and danger of the information stolen. I won't get a new SSN in 10 years. I won't get a new name. All the information will persist and still be useful. I'm personally in a worse position as my information was part of the OPM breach years ago and even images of my fingerprints are in the wild. And I got 18 months of free credit monitoring out of it.

When a charge of more than $100 is made on my credit card, I get a text message instantly. When I log into my banks web system, I get a text message instantly. I was able to set those things up. I don't see why it would be unreasonable to have a similar thing set up so that I could be alerted every single time my credit history is queried with information about who is querying it for what purpose, ideally with the ability to block it by replying to the text message.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#112

Post by mAdamTus »

paulgb wrote: post #12
calvinbhai wrote: post #6

So, this basically is a way for Equifax to get a mass waiver from people to make a class action lawsuit less damaging to the company. Opting out of the waiver is a long winded process of mailing a form. another funny thing is that if you sign up for their crappy product, you have to come back on a different day and complete the sign up. There wont be emails or notifications. If you forget to signup, then you have bas…

> Opting out of the waiver is a long winded process of mailing a form. I freaking hate tactics like this, so I am offering to go through the mailing process for anyone who fills out the form at https://unarbitrate.org/ . I'll pay to mail it, just because I hate this sort of thing. If you don't trust me with your data, the site also provides a way to print it and mail it yourself. But whatever it takes, I encourage ev…

Does everyone have an equifax username?

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#113

Post by zeep »

Johnny555 wrote: post #53
khc wrote: post #9

Even if the information they returned was correct, do you trust them enough to enter your SSN and name anymore? Surely they will be hacked again and you will be impacted by the next hack. 1. Enter SSN 2a. Impacted by this hack 2b. Not impacted by this hack but will be impacted by next

They already have your SSN unless you have no bank account, credit card, utilities in your name, a loan, etc. I think it'd be nearly impossible to be an adult living on your own and not have your SSN in a credit agency's database.

If you would be able to block them from buying your SSN under the current system, you would not be able to get any loans.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#114

Post by beojan »

jerf wrote: post #21
MichaelBurge wrote: post #11

Earlier quoted context omitted.

> For every SSN entered, Equifax can say in a class action lawsuit that they have waivers from all the following SSNs .... Equifax themselves have said they'll only use the waiver with respect to the credit monitoring service, and not to the security breach: https://techcrunch.com/2017/09/08/equifax-says-it-wont-bar-c... You could say, "Maybe they're lying", but it seems like it would be pretty easy for the class act…

They're not lying, because the act of saying it made it true. A court would no longer permit them that argument because the counterparty would just present that highly public statement. (Maybe there's a tiny chance they could wiggle out of it, but they would have to find a human judge who would let them, and I imagine those are in short supply in a case like this.) See: http://legal-dictionary.thefreedictionary.com/P…

> they would have to find a human judge who would let them, and I imagine those are in short supply in a case like this.)

Would it be possible to find any judge who can try this case, since the set of people affected by the breach is basically everyone?

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#115

Post by edoceo »

otakucode wrote: post #111
mortenjorck wrote: post #106

Earlier quoted context omitted.

While I certainly agree in spirit, Equifax is, as has been said elsewhere, unfortunately too big to fail. Too much infrastructure has been built around it. So, instead of dissolution, I propose two very reasonable remedies that I would consider the absolute minimum in concert with whatever fines and sanctions may be levied: 1. Credit freezes/unfreezes must be offered free in perpetuity. “They cost us money to perform…

Why 10 years? I mean, I don't see how one could defend any term shorter than the term of the validity and danger of the information stolen. I won't get a new SSN in 10 years. I won't get a new name. All the information will persist and still be useful. I'm personally in a worse position as my information was part of the OPM breach years ago and even images of my fingerprints are in the wild. And I got 18 months of fr…

How do you get a text message when crims setup a new credit account in your name?

That's what the 10yr monitoring is for?

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#116

Post by tuxxy »

Does anyone have any information about taking them to court yourself (small claims or otherwise)? This breach has affected me and as a cryptographic software engineer, I am exceptionally upset. I intend to go as far as my funds and personal knowledge will carry me.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#117

Post by Avshalom »

Kiro wrote: post #57

In Sweden your social security number is public information. What's the reason for it being private in the US? Sounds like a horrible thing to rely on for security anyway.

Well I mean, what it comes down to is you need someway of establing that it's actually you over a phone or Internet and you can assume that an equifax-equivalent would be storing that info regardless of exactly what it is in Sweden.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#118

Post by fastball »

takeda wrote: post #102
fastball wrote: post #22

Here is a crazy alternate theory for you guys, which I think fits all the details we have so far. 1. Equifax was never hacked. 2. Equifax accidentally deleted a substantial portion of their database. 3. Come up with a system to get the information they lost back, via a "have I been pwned?" checker. 3a. If you enter your details and they are not in their database, they assume it is one of the persons they deleted, add…

This is silly, because losing data would be lower outrage, and they might even purchase the data from other agencies so we wouldn't even know it happen. Also the data that leaked is not the valuable data to them. See how proudly they stated that no core databases were affected? Not giving a damn about us? What's valuable to them and to banks that use them are the actual information about our credit. If that was compr…

  crazy alternate theory

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#119

Post by ztjio »

beojan wrote: post #114
jerf wrote: post #21

Earlier quoted context omitted.

They're not lying, because the act of saying it made it true. A court would no longer permit them that argument because the counterparty would just present that highly public statement. (Maybe there's a tiny chance they could wiggle out of it, but they would have to find a human judge who would let them, and I imagine those are in short supply in a case like this.) See: http://legal-dictionary.thefreedictionary.com/P…

> they would have to find a human judge who would let them, and I imagine those are in short supply in a case like this.) Would it be possible to find any judge who can try this case, since the set of people affected by the breach is basically everyone?

Yeah that actually makes it irrelevant. The concern of people being impacted is about biases. If everyone is impacted the bias is no different than the base concept of peer justice in the first place.

Re: No matter what, Equifax may tell you you’ve been impacted by the hack

#120

Post by hypercluster »

zwerdlds wrote: post #68
tomrod wrote: post #48

Earlier quoted context omitted.

Allow them to rebrand?

Hey now. Accenture is a totally different company. They have reliable analysts who do good work. /s

Ha interesting, didn't know of Accenture's history.
Post reply on HN