What can Canadians do?
Submit Your Claim in the Equifax Breach Settlement
61–70 of 210 posts
Re: Submit Your Claim in the Equifax Breach Settlement
#62It would become a legendary case study if this site turned out to be an information phishing site. (This one is legit but I expect it to happen someday. I'm surprised it hasn't already.) After all this site links to the law firm JND, but nowhere does JND mention this site. So any of us could have made this site. Use the form below to find out if your information was impacted and if you are a class member. Last Name _…
You think they would have learned since the breach. Right after the breach was disclosed they made their information page equifaxsecurity2017.com. It had the same prompt for last name and last digits of the visitor's SSN. Then just said something along the lines of ~"Thanks for the information, we'll have more details later".
Re: Submit Your Claim in the Equifax Breach Settlement
#63They can keep the $125 (although, I wish I could direct it to a charity). I don't want to submit all of this information to an entity who's data security is probably worse (hard to believe) than Equifax!
Exactly... and what about the losses that I may suffer in the future from this? If I take the $125 now, am I no longer entitled to free identity restoration? The effects of this are going to last longer than the class action suit. It's just a huge waste of time for everybody except the lawyers.
Re: Submit Your Claim in the Equifax Breach Settlement
#645-second glance at the the stuff in the shows pixels for: Google Ads, Facebook, Twitter, a bunch of other slimy stuff.
What the actual F. Who does that?
Edit: also, no content security policy, no subresource integrity for 3rd party scripts. Is there such a thing as filing a class action against the party handling the class action? This is downright irresponsible.
Edit: I see a couple of the 3rd party scripts have integrity, but most don't.
Re: Submit Your Claim in the Equifax Breach Settlement
#65Earlier quoted context omitted.
Its somewhat of an unsolved problem, there's all sorts of these kind of sites that are legitimate but look really suspicious, like they could be phishing sites. Examples: https://www.annualcreditreport.com/ https://www.optoutprescreen.com/ You can tell these two are legit because they are listed on official government sites: https://www.ftc.gov/faq/consumer-protection/get-my-free-cred... https://www.consumer.ftc.gov/…
It's only a problem if the authority is obscured by an unrelated domain name. If the page was a location on a site with known authority, or a subdomain, it could be validated much more easily. Unfortunately, vanity gets in the way.
Its not just vanity though, in these two cases "the authority" is the industry as a whole, thus many "authorities."
For example:
>OptOutPrescreen.com is a joint venture among Equifax Information Services, LLC, Experian Information Solutions, Inc., Innovis Data Solutions, Inc., and TransUnion, LLC (collectively the "Consumer Credit Reporting Companies").
>[annualcreditreport.com] is maintained by Central Source, LLC. Central Source, LLC is sponsored by Equifax, Experian and TransUnion so you have a single site where you can ask for all three of your free credit reports.
Re: Submit Your Claim in the Equifax Breach Settlement
#66It would become a legendary case study if this site turned out to be an information phishing site. (This one is legit but I expect it to happen someday. I'm surprised it hasn't already.) After all this site links to the law firm JND, but nowhere does JND mention this site. So any of us could have made this site. Use the form below to find out if your information was impacted and if you are a class member. Last Name _…
Your comment inspired me to take a look. I compared the SSL certificate and the whois information to equifax.com. The settlement site uses a different company for the certificate. The settlement site uses Starfield Technologies vs DigiCert for equifax.com. The settlement site uses GoDaddy for their DNS vs UltraDNS for equifax.com. It's not impossible that a division in the company or a different law firm uses differe…
Legally, the settlement administrator must be totally independent from Equifax, so comparing their hosting providers, cert providers, etc. you'd only expect them to match by random chance.
Re: Submit Your Claim in the Equifax Breach Settlement
#67Earlier quoted context omitted.
It is true. You have to certify that you have credit monitoring if you choose to take the $125.
you're actually certifying that you will have credit monitoring for the next 6 months. i.e. you can sign up immediately before filling out the form and keep it for 6 months after.
Just sign up for Credit Karma or something similar. It's free
Re: Submit Your Claim in the Equifax Breach Settlement
#68It's turbo BS that you're not entitled to cash payout unless you already have a credit monitoring service.
I wonder what counts as a credit monitoring service. Can I choose what service I use? ...Can I monitor it myself?
There are two reasonable answers, ignoring whatever is specified in the legalese which of course takes precedence:
1) It must be a third party service that you have entered into a business arrangement with, where the arrangement in clear and specific terms provides you with credit monitoring.
2) It must hold up in a court of law if challenged.
That second one is the anti-loophole provision of law, and protects against the kind of loopholes people try to find to get around the clear intent of the requirement.
You can choose to use any service that would hold up in a court of law. There are no clear answers on whether "any" service would. Time established, diversity of customers, active or inactive business, frequency of credit report inspection; all could be factors in a judicial evaluation of whether you complied with the terms or not. Capital One? Yes, they plausibly do offer credit monitoring as a service. Joe Bloe's Credit Woes? Entirely possible, if they've been around a while and can demonstrate that they pull credit reports on a regular basis and audit them in some manner.
Can you monitor it yourself? Only if you already operate a credit monitoring business. Otherwise, it'll fail the plausible test, and you lose your $125 + lawyer fees + risk angering a judge.
Re: Submit Your Claim in the Equifax Breach Settlement
#69I don't want money. I don't want free service. I don't want any compensation. I want Equifax as a company to be dissolved for incompetency with private data, and I want a way to legally opt out of other such companies collecting and aggregating private data about me.
"I want a way to legally opt out of other such companies collecting and aggregating private data about me."
The problem is this also means you will be completely opting out of the credit system. No more morgtgages, no more credit cards, no more car loans.
I'm afraid it's kind of a necessary evil.
Re: Submit Your Claim in the Equifax Breach Settlement
#70Just another way to submit your PII to a bound to be leaked repository.