Live data from Hacker News

It's still easy for anyone to become you at Experian

krebsonsecurity.com

191–200 of 347 posts

Re: It's still easy for anyone to become you at Experian

#191

Of course, we aren’t the customers for these spying companies. But it is surprising that the total lack of security isn’t a deal-breaker for their actual customers. I mean if you can basically impersonate anybody using this service, what is the point of using it?

We need a HIPAA for personal data.

Re: It's still easy for anyone to become you at Experian

#193

Earlier quoted context omitted.

I think they are talking about this case, it was thrown out. https://www.theregister.com/2022/02/15/missouri_html_hacking...

> Governor Parson's office maintained that Renaud had unlawfully hacked the school website: "The hacking of Missouri teachers' personally identifiable information was a clear violation of Section 569.095, RSMo, which the state takes seriously. The state did its part by investigating and presenting its findings to the Cole County Prosecutor, who has elected not to press charges, as is his prerogative." It wasn't throw…

My understanding of the law is that a judge would throw out the case as well

Re: It's still easy for anyone to become you at Experian

#195
Not a lawyer, but I wonder if Tortious interference Laws can be used by individuals to file civil lawsuits against credit reporting agencies ?

In my head I am interpreting the law like this: Credit Reporting Company negligence "interferes" with a person being able to obtain a loan.

[1] https://en.wikipedia.org/wiki/Tortious_interference

Re: It's still easy for anyone to become you at Experian

#198

Not a lawyer, but I wonder if Tortious interference Laws can be used by individuals to file civil lawsuits against credit reporting agencies ? In my head I am interpreting the law like this: Credit Reporting Company negligence "interferes" with a person being able to obtain a loan. [1] https://en.wikipedia.org/wiki/Tortious_interference

https://www.ftc.gov/legal-library/browse/statutes/fair-credi...

IANAL either, but it seems the losses suffered from ID fraud are only recoverable via this.

Re: It's still easy for anyone to become you at Experian

#199

In most contexts, providing false information about someone in a way that harms them is slander or libel. I think we need to revisit whether credit reporting deserves to be exempted from that, and under what circumstances.

Absolutely. We should be able to successfully sue credit rating agencies for monetary damages if they tell a lender false information about us and it causes us to not get a loan or have a higher rate than is warranted. It should not matter whether they know it’s false. The harm happens regardless of whether they were negligent or malicious.

Re: It's still easy for anyone to become you at Experian

#200

In most contexts, providing false information about someone in a way that harms them is slander or libel. I think we need to revisit whether credit reporting deserves to be exempted from that, and under what circumstances.

Actually, the way they work is "x company told me y person has with ". For non-celebrities, it is only defamation if it amounts to at least negligence in verifying these facts - i.e. negligent only if they have reasonable knowledge to believe the information is false. When you report to the bureaus that an account is fraudulent, that is effectively giving them notice that the account in question is not actually yours, and by removing it from your report, it's relieving them of the liability of spreading such defaming information in the future.
Post reply on HN