Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

2.9B hit in one of largest data breaches; full names and SSNs exposed

tomsguide.com

Post reply on HN
Print view View original

81–88 of 88 posts

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#81

Post by ImPostingOnHN »

vkou wrote: post #76
ImPostingOnHN wrote: post #22

Earlier quoted context omitted.

What is a store card in that case, and how does it differ from credit card (other than, I assume, the place you apply)? The store cards I have seen are simply store-branded credit cards.

> What is a store card in that case, and how does it differ from credit card (other than, I assume, the place you apply)? It's not a credit card, debit card, or any other kind of payment card. It's not even, like, a COSTCO membership card. It's a tracking card that is used by the store to track your purchases in exchange for a small discount on some items if you swipe it at checkout.

Thank you, and that does seem like a ridiculous thing for which to request an SSN.

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#82

Post by [deleted] »

ryandrake wrote: post #13
kevindamm wrote: post #2

At what point can we start demanding that SSNs be redefined? I've lost track of how many data breaches I've unwittingly been the victim of, and I'm usually more careful and paranoid than most.

We "just" need to stop pretending they are secret like passwords and using them to authenticate that someone is who they say they are. Banks should not be issuing loans based on a bunch of personal information (including SSN) that the collected and concluded "Yup, that data matches itself--therefore you are actually you!"

[deleted]

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#83

Post by vkou »

cs702 wrote: post #27
vkou wrote: post #18

Earlier quoted context omitted.

You don't get a check, you get a gift card for a credit monitoring service that you will never use because all your data leaks all the time already. Motherfuckers asked my wife her SSN when she was getting a store card the other week. Not a credit card, a store card.

Actually, you get one free year of credit monitoring. After the first year, you'll be asked to pay for monitoring.

Given how many data breaches I've been in, I'm pretty sure I have more unclaimed years of free credit monitoring than there are grains of sand on a beach.

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#84

Post by ajdude »

kevindamm wrote: post #2

At what point can we start demanding that SSNs be redefined? I've lost track of how many data breaches I've unwittingly been the victim of, and I'm usually more careful and paranoid than most.

There's a really good video by CGP Grey that touched on this:

https://youtube.com/watch?v=Erp8IAUouus

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#85

Post by bradknowles »

vkou wrote: post #18
jmclnx wrote: post #3

>As reported by Bloomberg, news of this massive new data breach was revealed as part of a class action lawsuit that was filed at the beginning of this month. I am so looking forward to getting my 2.99 USD check from this suit. Of course I need to apply for that check via an on-line site and give them all my personal information. Great time to be alive.

You don't get a check, you get a gift card for a credit monitoring service that you will never use because all your data leaks all the time already. Motherfuckers asked my wife her SSN when she was getting a store card the other week. Not a credit card, a store card.

Technically, they’re still a creditor, and creditors get special privileges when it comes to things like that. So, while I would refuse, it’s probably not a violation of federal law.

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#86

Post by bradknowles »

qup wrote: post #34
vkou wrote: post #18

Earlier quoted context omitted.

You don't get a check, you get a gift card for a credit monitoring service that you will never use because all your data leaks all the time already. Motherfuckers asked my wife her SSN when she was getting a store card the other week. Not a credit card, a store card.

I had a pawn shop try to take my social to buy a air paint sprayer. They said it was a city ordinance. I left empty handed, even though I think SSN shouldn't be used as a password.

Now that would be a violation of federal law. I would inform the store that my wife is a lawyer, and we can have her law firm contact their law firm to discuss why they are in violation of federal law.

Then I would ask them if they want to reconsider this possibility.

Now, if you actually want to use this tactic, I would suggest you look up the federal law in question, so that you can quote it by section and paragraph. Maybe keep a printed copy with you.

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#87

Post by bradknowles »

hansvm wrote: post #32
cs702 wrote: post #27

Earlier quoted context omitted.

Actually, you get one free year of credit monitoring. After the first year, you'll be asked to pay for monitoring.

Actually, you'll need to input your credit card or other payment details for the one year, and after the first year they'll automatically remove money from it. Cancellation is not posible.

That’s why I sign up with virtual credit cards from privacy.com.

If I don’t like the service, then I can cancel the card. And I can limit them to how much money can be taken out per transaction, or per month, or per year, or total. Or the card could be a one-time only card. And it will be merchant locked, so if anyone else tries to charge that card, they get refused.

Re: 2.9B hit in one of largest data breaches; full names and SSNs exposed

#88

Post by earthboundkid »

stvltvs wrote: post #44
earthboundkid wrote: post #26

Earlier quoted context omitted.

You freeze your credit by making an account on TransUnion, Experian, and Equifax's websites. It sucks, and they suck, but it's free. Unless you take out loans quite frequently, there's no reason not to do it. My credit has been frozen for years, and I only ever unfreeze it for a month or two at a time when I need to refinance a mortgage or something like that.

This is good as far as it goes, but what about all those times customer support for companies unrelated to your credit asks you for the last four of your SSN (birthrate, address, etc.) to confirm your identity?

If they aren't doing a credit pull, it's fine. If they are, you unfreeze for the month, but credit pulls hurt your credit. You shouldn't just do them randomly.
Post reply on HN