Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

French government agency confirms breach as hacker offers to sell data

bleepingcomputer.com

Post reply on HN
Print view View original

31–40 of 168 posts

Re: French government agency confirms breach as hacker offers to sell data

#31

Post by tcgv »

throwup238 wrote: post #17
hk__2 wrote: post #10

> the data stolen in the breach could include full names, dates and places of birth, mailing and email addresses, and phone numbers on an undisclosed number of citizens Nothing really new here sadly, this information about me have leaked half a dozen of times in the past 2-3 years or so. These things will never change if the only penalty the company/agency gets is "send a message to your users saying you are sorry an…

Wait, you don’t even get a month of free credit monitoring?

My full name, phone number, and address were leaked by TAP Air Portugal about five years ago, along with the details of my parents who were on the same booking. Since then, my dad has been targeted by those types of scams where a fraudster impersonates me to ask for money.

I never received a notification from TAP; I only found out a year later through my Google One security feature. I certainly didn't get an apology—much less a free travel ticket!

Re: French government agency confirms breach as hacker offers to sell data

#32

Post by SilverElfin »

Yet another example why NO ONE should trust age verification laws or companies like Anthropic forcing you to verify identity with shady companies like Persona (https://news.ycombinator.com/item?id=47872608). Whatever info you give up, it’ll be exposed one day.

Re: French government agency confirms breach as hacker offers to sell data

#33

Post by psychoslave »

realusername wrote: post #12
Zealotux wrote: post #2

Great, now scammers can steal my identity directly from the government. I hope they release a tool to check if I'm impacted or at least email me about it.

With the number of leaks the French administration had everywhere, you don't need a tool, you are guaranteed to be impacted.

"Our government successfully achieved wide distribution of valuable assets in the era of digital information."

Re: French government agency confirms breach as hacker offers to sell data

#34

Post by VadimPR »

tcgv wrote: post #31
throwup238 wrote: post #17

Earlier quoted context omitted.

Wait, you don’t even get a month of free credit monitoring?

My full name, phone number, and address were leaked by TAP Air Portugal about five years ago, along with the details of my parents who were on the same booking. Since then, my dad has been targeted by those types of scams where a fraudster impersonates me to ask for money. I never received a notification from TAP; I only found out a year later through my Google One security feature. I certainly didn't get an apology—…

I'm dissatisfied about the TAP leak as well! I was affected, and like you, didn't even receive a notification - nevermind compensation for having leaked my personal data to the dark web enabling all sorts of shenanigans that make my personal life difficult.

Re: French government agency confirms breach as hacker offers to sell data

#35

Post by kleene_op »

I find it especially ironic that they would leak all my data, given the fact that they would ask of me to forward them every piece of id imaginable whenever I needed to forge or amend a new one (when adding a mention on my driver's license for instance).

Like they didn't have access to it anyway.

Re: French government agency confirms breach as hacker offers to sell data

#36

Post by rawgabbit »

afarah1 wrote: post #18
rawgabbit wrote: post #9

It seems to me we must move away from worrying about ransomware, data breach, data protection as that ship has already sailed and everyone's PII has already been stolen. We should think of how to verify people's identities online (for things like government benefits etc). I have heard of the Dutch and the Japanese using national digital identity systems although I am unclear how they work. India is doing biometrics.…

Biometrics is just something else to get leaked, terrible idea because it's even more sensitive (can be used to track you through cameras for example, like used in the Iran war). This problem has long been solved with federated IdPs and MFA - something you own like OTP device/physical token besides something you know like SSN/tax id/password. Most governments prefer biometrics of course because citizen privacy is the…

Maybe in the future, our driver licenses will become a physical token?

Re: French government agency confirms breach as hacker offers to sell data

#37

Post by [deleted] »

gus_massa wrote: post #29
throwup238 wrote: post #17

Earlier quoted context omitted.

Wait, you don’t even get a month of free credit monitoring?

I'm not sure about France, but here in Argentina all this info is assumed to be public. If you want a credit at a bank or shop, they ask for a physical copy of the national ID [1], probably a photocopy too, an electricity or water bill and perhaps other paperwork that is hard to get (verified phone number???). [1] Do you want my number? It's inside this list: for i in range(1E9): print (i)

[deleted]

Re: French government agency confirms breach as hacker offers to sell data

#38

Post by tiagod »

tcgv wrote: post #31
throwup238 wrote: post #17

Earlier quoted context omitted.

Wait, you don’t even get a month of free credit monitoring?

My full name, phone number, and address were leaked by TAP Air Portugal about five years ago, along with the details of my parents who were on the same booking. Since then, my dad has been targeted by those types of scams where a fraudster impersonates me to ask for money. I never received a notification from TAP; I only found out a year later through my Google One security feature. I certainly didn't get an apology—…

That TAP data was leaked on a tor hidden service, in multiple files, and download was extremely slow on the days following the leak. One of the files was much smaller, and my friend had the bad luck to have his data in that one.

His phone was spammed so incessantly he had to change his number almost immediately.

Re: French government agency confirms breach as hacker offers to sell data

#39

Post by yladiz »

kleene_op wrote: post #35

I find it especially ironic that they would leak all my data, given the fact that they would ask of me to forward them every piece of id imaginable whenever I needed to forge or amend a new one (when adding a mention on my driver's license for instance). Like they didn't have access to it anyway.

They do have to prove who you are, and to do that you need to show your ID(s) and they need to check it in their system. I don't understand your comment.

Re: French government agency confirms breach as hacker offers to sell data

#40

Post by Traubenfuchs »

gus_massa wrote: post #29
throwup238 wrote: post #17

Earlier quoted context omitted.

Wait, you don’t even get a month of free credit monitoring?

I'm not sure about France, but here in Argentina all this info is assumed to be public. If you want a credit at a bank or shop, they ask for a physical copy of the national ID [1], probably a photocopy too, an electricity or water bill and perhaps other paperwork that is hard to get (verified phone number???). [1] Do you want my number? It's inside this list: for i in range(1E9): print (i)

If you are that unconcerned, why do you not provide us with your information right here and now?
Post reply on HN