Live data from Hacker News

Equifax Breach Fallout: Your Salary History

krebsonsecurity.com

41–50 of 140 posts

Re: Equifax Breach Fallout: Your Salary History

#41
post #8

It seems in China people use their cellphone to pay everything these days, credit/debit card are becoming old-fashion and meaningless there. Hope one day we can do it here. For mortgage and car loans you do not need credit card either. So we can just give up credit card totally. We do need a new way to build people's credit scores somehow though.

It would be great all up until the signal is lost from a natural disaster causing widespread power failures[1] and all your money is linked to a slowly draining phone. [1] https://www.nytimes.com/2017/09/29/us/puerto-rico-shortages-...

Having a credit/debit card in that situation wouldn't help you either. If power is down, then so are the payment terminals and likely also the ATMs. Cash is the only option in that scenario and the prepared take cash out in advance, which you can do with either a card or mobile phone in many countries these days.

Re: Equifax Breach Fallout: Your Salary History

#42
post #18

Earlier quoted context omitted.

Considering the $7.2 million contract the IRS just awarded Equifax in a no contest bid, I think we're definitely getting close! /s

If you have a better way to ensure knowledge based authentication continuity for all online IRS transactions until they switch providers, I'd love to hear it.

Here's one: don't do KBA, since that is an open door to fraud.

Re: Equifax Breach Fallout: Your Salary History

#43
post #19

I didn't know this existed at all. I thought they just made phone calls to your previous employer and asked. Are we allowed to see what's in it? I mean normally, not just when there's a data breach (and it looks like they shut it all down right now). Because when you get asked this on an interview, what's the "right" answer? There's base pay, bonuses, 401k match, all kinds of stuff. So the "right" answer is up in the…

Have you ever logged into Credit Karma? I wholehearty recommend it just to see how much information they are pulling, fully automatic up to seven days ago. Its not only my salary month by month, but also all my bank accounts, all credit card account all with amount I owe, amounts and history I paid, everything! Full front-face info, straight from credit reporting bureaus! :|

[deleted]

Re: Equifax Breach Fallout: Your Salary History

#44
post #19

I didn't know this existed at all. I thought they just made phone calls to your previous employer and asked. Are we allowed to see what's in it? I mean normally, not just when there's a data breach (and it looks like they shut it all down right now). Because when you get asked this on an interview, what's the "right" answer? There's base pay, bonuses, 401k match, all kinds of stuff. So the "right" answer is up in the…

Have you ever logged into Credit Karma? I wholehearty recommend it just to see how much information they are pulling, fully automatic up to seven days ago. Its not only my salary month by month, but also all my bank accounts, all credit card account all with amount I owe, amounts and history I paid, everything! Full front-face info, straight from credit reporting bureaus! :|

Credit Karma only shows credit accounts (credit cards, phone and internet bills,etc.) It does not include bank accounts (savings or chequing) nor salary information. But I am in Canada, maybe things are different in the States.

Re: Equifax Breach Fallout: Your Salary History

#45
post #21

> As part of our ongoing commitment to performance, reliability and security, Equifax Workforce Solutions will be servicing The Work Number starting Sunday, October 8, 2017. This will result in temporary service interruptions; if you have received this notice please call our service center at 866-222-5880 to complete your transaction. We apologize for any inconvenience this may cause. Convenient that Equifax is doing…

There's an alternate set here, still up and running.

https://secure.w2.talx.com/popups/findemployer.aspx

https://secure.w2.talx.com/PreAuthenticated/employerEntry.as...

Re: Equifax Breach Fallout: Your Salary History

#46
post #32

Is it legal for employers to provide salary data on particular employees without permission?

I went looking to create an account for employment verification at Equifax about a week ago. It was via different channel that this Krebs one, where you go to the product page and can sign up for a one time check for around $40 IIRC. And it does require you to affirm you have permission from the employee before getting their data. How they verify that is beyond me. I would love to know if there is a way to see what d…

> How they verify that is beyond me.

They don't. It's essentially an indemnification clause that they can point to as a copout if their service gets abused and a victim of that abuse comes looking.

"They said they had permission. We're just an innocent third party that they lied to. Go take it up with them." more or less

Re: Equifax Breach Fallout: Your Salary History

#47
post #7

I hope all the hacked data gets open-sourced. Maybe then we'll have some serious reform. This is ridiculous. What is it going to take to get Congress to actually do something? In the meantime, my strategy is to keep my credit score bad.

Congress does plenty... ..to allow these corporations to continue to make money at our expense.

Indeed. Though I guess the plans are at least delayed for now, if not abandoned.

https://www.nbcnews.com/business/consumer/republicans-congre...

Re: Equifax Breach Fallout: Your Salary History

#48
post #22

> The service is designed to provide automated employment and income verification for prospective employers, and tens of thousands of companies report employee salary data to it. It sounds like companies can easily use this to collude against employee wages and benefits.

Yeah, that is pretty crazy. The ball is usually already firmly in the employer's court. This kind of information greatly diminishes the already most-diminished's bargaining power.

Past pay is not directly a significant issue. It's just a question of getting competing offers.

The real issue is some people suck at negotiation and past salaries will tell companies that.

Re: Equifax Breach Fallout: Your Salary History

#49

It's offensive that I have to go jump through hoops, set security questions and a secret pin just so I can secure my own salary information. Is it too much to dream that Equifax should be legally obligated to provide, at the bare minimum, a way to easily secure this sensitive information? If I were a hiring manager or in HR this would be a goldmine for verifying candidates' salaries and work histories, and gaining th…

1. I've only ever given my SSN to a company in the same packet of information that contained my signed offer letter, so we'd be far past negotiations at that point. If you're worried about them going back and verifying what you said you made, well, you shouldn't be lying about that anyway. 2. I'd hope that people might hesitate a little bit before committing acts of identity fraud on an institutional scale.

Paychecks don't always correlate to other compensation considerations, such as stock options, extra vacation, higher 401k match, higher health insurance contribution, etc, that are often negotiated.

Re: Equifax Breach Fallout: Your Salary History

#50
post #42

Earlier quoted context omitted.

If you have a better way to ensure knowledge based authentication continuity for all online IRS transactions until they switch providers, I'd love to hear it.

Here's one: don't do KBA, since that is an open door to fraud.

How about mandatory 2FA rfid token implants, then we can put this SSN business behind us.
Post reply on HN