Live data from Hacker News

PayPal says personal data may be compromised for 1.6M TIO users

foxbusiness.com

1–10 of 44 posts

Re: PayPal says personal data may be compromised for 1.6M TIO users

#3
> PayPal will offer affected TIO consumers free credit-monitoring services through Experian Plc, the spokesman said.

What's the point anymore? This has happened so many times this year I've got more credit monitoring than I could ever need. Now I just need them to actually redo the "identity" system into something I can actually use with peace of mind.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#4

> PayPal will offer affected TIO consumers free credit-monitoring services through Experian Plc, the spokesman said. What's the point anymore? This has happened so many times this year I've got more credit monitoring than I could ever need . Now I just need them to actually redo the "identity" system into something I can actually use with peace of mind.

There was never an actual point. It was the only plausible-sounding thing that could be given and neither regular folks nor industry journalists called them out.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#5
Isn't it time we criminalize any kind of data leaks by a company? This has to be seriously discussed now. That is the only way we can make these companies keep data security at the top of their priority list.

I know it is a subsidiary of paypal, not paypal itself, but that is irrelevant.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#6
post #5

Isn't it time we criminalize any kind of data leaks by a company? This has to be seriously discussed now. That is the only way we can make these companies keep data security at the top of their priority list. I know it is a subsidiary of paypal, not paypal itself, but that is irrelevant.

FTFY: That is the only way we can make sure companies will avoid disclosing breaches for sure and to have them pursue a burnt-and-salted-earth-approach towards anyone who might turn up evidence of a breach.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#7
post #5

Isn't it time we criminalize any kind of data leaks by a company? This has to be seriously discussed now. That is the only way we can make these companies keep data security at the top of their priority list. I know it is a subsidiary of paypal, not paypal itself, but that is irrelevant.

Don't blame the victim. But hiding that there was a leak? Sure.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#8
post #5

Isn't it time we criminalize any kind of data leaks by a company? This has to be seriously discussed now. That is the only way we can make these companies keep data security at the top of their priority list. I know it is a subsidiary of paypal, not paypal itself, but that is irrelevant.

Don't blame the victim. But hiding that there was a leak? Sure.

The victim is not the company. It is the users - people like you and me. Let me say it again - companies are NOT the victims.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#9
post #8

Earlier quoted context omitted.

Don't blame the victim. But hiding that there was a leak? Sure.

The victim is not the company. It is the users - people like you and me. Let me say it again - companies are NOT the victims.

Companies have a reasonable obligation to protect our data, so I'm with you if they were negligent in prevention, detection, mitigation, or revelation. If they took reasonable measures to prevent, and were forthcoming if compromised anyway, and took measures to minimize damage to users, there's no reason to blame them.

Re: PayPal says personal data may be compromised for 1.6M TIO users

#10

> PayPal will offer affected TIO consumers free credit-monitoring services through Experian Plc, the spokesman said. What's the point anymore? This has happened so many times this year I've got more credit monitoring than I could ever need . Now I just need them to actually redo the "identity" system into something I can actually use with peace of mind.

And all of the data breach sites seem to go out of their way to make them seem scammy as all get out.

www.databreach-settlement.com is for the Anthem data breach.

The Uber driver breach sends you to www.experianidworks.com.

The Equifax incident sends you to www.equifaxsecurity2017.com.

And those are just the three "we can't do security" cards/letters sitting on my desk.

Post reply on HN