Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

French government agency confirms breach as hacker offers to sell data

bleepingcomputer.com

Post reply on HN
Print view View original

21–30 of 168 posts

Re: French government agency confirms breach as hacker offers to sell data

#21

Post by john_strinlai »

itopaloglu83 wrote: post #13
hk__2 wrote: post #10

> the data stolen in the breach could include full names, dates and places of birth, mailing and email addresses, and phone numbers on an undisclosed number of citizens Nothing really new here sadly, this information about me have leaked half a dozen of times in the past 2-3 years or so. These things will never change if the only penalty the company/agency gets is "send a message to your users saying you are sorry an…

[flagged]

did you just want an excuse to say "microslop" or what is the relevance of your comment to either the article or the comment you are replying to?

Re: French government agency confirms breach as hacker offers to sell data

#22

Post by deltoidmaximus »

rawgabbit wrote: post #9

It seems to me we must move away from worrying about ransomware, data breach, data protection as that ship has already sailed and everyone's PII has already been stolen. We should think of how to verify people's identities online (for things like government benefits etc). I have heard of the Dutch and the Japanese using national digital identity systems although I am unclear how they work. India is doing biometrics.…

Based on how things are, I feel like the US solution is just going to end up with me requiring a retinal scan to buy pants from Target online and then that scan will end up on the dark web along with my voice print and a scan of a my driver's license.

Re: French government agency confirms breach as hacker offers to sell data

#24

Post by Avamander »

Zealotux wrote: post #2

Great, now scammers can steal my identity directly from the government. I hope they release a tool to check if I'm impacted or at least email me about it.

Why would those pieces of data (DOB, full name, address) ever be sufficient for identity theft?

If that's sufficient to achieve anything then those systems are built on top of hopes and dreams.

Re: French government agency confirms breach as hacker offers to sell data

#26

Post by anonym29 »

afarah1 wrote: post #18
rawgabbit wrote: post #9

It seems to me we must move away from worrying about ransomware, data breach, data protection as that ship has already sailed and everyone's PII has already been stolen. We should think of how to verify people's identities online (for things like government benefits etc). I have heard of the Dutch and the Japanese using national digital identity systems although I am unclear how they work. India is doing biometrics.…

Biometrics is just something else to get leaked, terrible idea because it's even more sensitive (can be used to track you through cameras for example, like used in the Iran war). This problem has long been solved with federated IdPs and MFA - something you own like OTP device/physical token besides something you know like SSN/tax id/password. Most governments prefer biometrics of course because citizen privacy is the…

Biometrics are the only credential you can't roll after compromise.

Re: French government agency confirms breach as hacker offers to sell data

#28

Post by add-sub-mul-div »

itopaloglu83 wrote: post #13
hk__2 wrote: post #10

> the data stolen in the breach could include full names, dates and places of birth, mailing and email addresses, and phone numbers on an undisclosed number of citizens Nothing really new here sadly, this information about me have leaked half a dozen of times in the past 2-3 years or so. These things will never change if the only penalty the company/agency gets is "send a message to your users saying you are sorry an…

[flagged]

hackernews.txt

Re: French government agency confirms breach as hacker offers to sell data

#29

Post by gus_massa »

throwup238 wrote: post #17
hk__2 wrote: post #10

> the data stolen in the breach could include full names, dates and places of birth, mailing and email addresses, and phone numbers on an undisclosed number of citizens Nothing really new here sadly, this information about me have leaked half a dozen of times in the past 2-3 years or so. These things will never change if the only penalty the company/agency gets is "send a message to your users saying you are sorry an…

Wait, you don’t even get a month of free credit monitoring?

I'm not sure about France, but here in Argentina all this info is assumed to be public. If you want a credit at a bank or shop, they ask for a physical copy of the national ID [1], probably a photocopy too, an electricity or water bill and perhaps other paperwork that is hard to get (verified phone number???).

[1] Do you want my number? It's inside this list:

  for i in range(1E9):
    print (i)

Re: French government agency confirms breach as hacker offers to sell data

#30

Post by nick486 »

nxm wrote: post #8
Oras wrote: post #3

Earlier quoted context omitted.

are govs required to comply with GDPR and data breaches laws?

Yes, but unelected bureaucrats only impose fines on the private sector.

what would be the point of the government fining itself though?

Now that I'm thinking of it, it would create the need for an extra gaggle of bureaucrats to oversee the process,so I suppose someone might see a point to it ...

Post reply on HN