Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Delta Dental says data breach exposed info of 7M people

bleepingcomputer.com

Post reply on HN
Print view View original

61–70 of 152 posts

Re: Delta Dental says data breach exposed info of 7M people

#61

Post by michaelcampbell »

flutas wrote: post #21
bonton89 wrote: post #7

Earlier quoted context omitted.

My understanding is about everyone in America (and bizarrely a lot of people in Europe) got f'ed by the Equifax breech already.

TBH, I know of at least one other breach that everyone got hit by too...afaik it was never made public though. It's been a while since I was told the story, so bear with me. It was Experian. They shipped tape backups of essentially their entire consumer credit DB, unencrypted, via UPS. UPS truck got robbed at gunpoint, only one package stolen... EDIT: Transunion -> Experian

Back when people got physical checks for payroll, I worked at a company that did this, and gave physical stubs to those of use who did direct deposit which was still kind of new.

Biweekly, the person handing them out would take them home to sort by floor/area/whatever to ease their work the next day.

You guessed it, one day their car was stolen, with ALL of our checks/stubs in them. And our SSN's were printed on them too.

We were given a year of credit monitoring at the credit unions, paid for by the company. And they stopped printing the SSN's on them.

Re: Delta Dental says data breach exposed info of 7M people

#62

Post by excerionsforte »

Really basic security practices weren't followed. I cancelled my plan now and switching to my new primary health insurance dental plan which I should've looked at. I don't know why these companies wait for a breach before looking at their systems after all these data breaches. I mean storing credit cards is Do Not Do 101.

Re: Delta Dental says data breach exposed info of 7M people

#63

Post by chrbr »

bradgessler wrote: post #51

I’ll never forget when a Citibank employee that processes mortgage applications asked me for my credit card over email. They also had a “secure messaging center” that would take your message, put it in a PDF, password protect the PDF, and then send it to the email address along with instructions for them to login to the website to get the PDF password. The list goes on of bad things banks do with security and is a bl…

The entire home-buying process (in the US, at least) seems to be built on shady-looking ways to nickel and dime people. I remember telling friends when going through it that it'd be easy to scam me because I got so used to urgent requests to pay some fee for inspections or legal stuff or whatever that I'd just shell out the money without asking questions.

Re: Delta Dental says data breach exposed info of 7M people

#64

Post by AndrewKemendo »

hn_throwaway_99 wrote: post #4

> who had their names, financial account numbers, and credit/debit card numbers, including security codes, exposed. Delta Dental should be rightly and truly f'd for that one. Storing security codes at all is totally forbidden by PCI rules. Delta Dental should have their ability to process credit cards completely revoked for this egregious breach.

I find this especially ironic given the fact that most tech companies I’ve been at used Delta dental of California

I feel like we all deserve this somehow for allowing bad practices like this to proliferate in the favor of business objectives

Re: Delta Dental says data breach exposed info of 7M people

#67

Post by koolba »

AndrewKemendo wrote: post #64
hn_throwaway_99 wrote: post #4

> who had their names, financial account numbers, and credit/debit card numbers, including security codes, exposed. Delta Dental should be rightly and truly f'd for that one. Storing security codes at all is totally forbidden by PCI rules. Delta Dental should have their ability to process credit cards completely revoked for this egregious breach.

I find this especially ironic given the fact that most tech companies I’ve been at used Delta dental of California I feel like we all deserve this somehow for allowing bad practices like this to proliferate in the favor of business objectives

Delta is like the Blue Cross of dental plans.

Re: Delta Dental says data breach exposed info of 7M people

#68

Post by kube-system »

pants2 wrote: post #32
MattGaiser wrote: post #23

Earlier quoted context omitted.

Even as a tech person, I am indifferent. I’ve adapted to a world where cards get stolen, so I never use debit, review my statements, and have spending notifications turned on for my phone. I have the apps so I can instantly lock my card. I have already learned to live in a financial castle. It is obviously not great, but an additional breach has little marginal impact on my life.

The real question is why online credit card payments still involve using the whole card number, as opposed to some message signed by the card's private key authorizing certain spending limits for a retailer.

Because smart card readers aren't very common on home computers.

Re: Delta Dental says data breach exposed info of 7M people

#69

Post by shnock »

flutas wrote: post #21
bonton89 wrote: post #7

Earlier quoted context omitted.

My understanding is about everyone in America (and bizarrely a lot of people in Europe) got f'ed by the Equifax breech already.

TBH, I know of at least one other breach that everyone got hit by too...afaik it was never made public though. It's been a while since I was told the story, so bear with me. It was Experian. They shipped tape backups of essentially their entire consumer credit DB, unencrypted, via UPS. UPS truck got robbed at gunpoint, only one package stolen... EDIT: Transunion -> Experian

Could you please share some online references or sources for this?

"It was never made public" - do you mean to imply that this is otherwise unverifiable

Post reply on HN