Log in

View Full Version : Equifax Hacked ! 143 million SS numbers stolen.



Down1
8th September 2017, 07:49 AM
Maggots.
This is big.

https://www.bloomberg.com/technology

https://www.bloomberg.com/technology

Dogman
8th September 2017, 07:56 AM
What really sucks is they will not contact the effected, you have to join (free so they say) to see if you are compromised !

You contact them , not they contacting you.

midnight rambler
8th September 2017, 07:57 AM
Good thing my *credit* is non-existing. Nothing to exploit or take advantage of.

*when queried, the credit reporting agencies go: "Who are you?? We don't know you!"

Ares
8th September 2017, 08:02 AM
https://twitter.com/campuscodi/status/906131649821278208

https://pbs.twimg.com/media/DJM6BUTWsAABo0p.jpg:large

crimethink
8th September 2017, 10:05 AM
Equihax executives unloaded shares after internal discovery but prior to public disclosure of huge hack - "totally coincidental," of course:

https://www.bloomberg.com/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack

Hitch
8th September 2017, 10:25 AM
143 million folks, that's about half the population of the whole US.

You can check to see if you are impacted at their website. The message I received was that I was NOT impacted by this, thankfully.

https://www.equifaxsecurity2017.com/potential-impact/

crimethink
8th September 2017, 10:34 AM
143 million folks, that's about half the population of the whole US.

You can check to see if you are impacted at their website. The message I received was that I was NOT impacted by this, thankfully.

https://www.equifaxsecurity2017.com/potential-impact/

All three in our household "may have been" affected, and only one was allowed to sign up for their "service." The other two have to wait to sign up until next week.

These credit reporting agencies pile up billions selling OUR data, and refuse to hire competent people to secure this data. When they lose it, it's "oh, well, here, we'll give you a YEAR of our 'service' to 'protect' you. After the year is up, you can PAY to keep being 'protected'."

BTW, the Equihax terms and conditions for sign-up on that site include a waiver of class action rights.

Hitch
8th September 2017, 10:39 AM
BTW, the Equihax terms and conditions for sign-up on that site include a waiver of class action rights.

Wow, that's good to know. Sorry to hear that you and your family may have been affected. The local news anchor this morning stated that the term "may have been affected" means your info has been compromised. I'm not sure why they say I'm not, surely I'm in their system as well. Not that I trust what they say anyway.

crimethink
8th September 2017, 10:48 AM
Wow, that's good to know. Sorry to hear that you and your family may have been affected. The local news anchor this morning stated that the term "may have been affected" means your info has been compromised. I'm not sure why they say I'm not, surely I'm in their system as well. Not that I trust what they say anyway.

Thanks. My cards have been "compromised" thrice in the last two years, in two cases, internally at the bank's contractor. I pay cash for most things, so I'm not "OMG, I'm gonna die!!" if the cards get shut off, but it gets to be a nuisance to deal with the aftermath. Who knows what all might come out of this.

While I'm sure that the CRAs simply aren't doing and investing enough to protect against these breaches, sometimes I think this could be a form of mass gaslighting...deliberately freaking people out, to sell "financial services," namely, endless subscriptions to their "credit monitoring."

More on the waiver:

https://www.reddit.com/r/personalfinance/comments/6yryuu/do_not_use_equifaxsecurity2017com_unless_you_want/

http://www.marketwatch.com/story/why-some-equifax-customers-have-unwittingly-waived-their-rights-to-a-class-action-lawsuit-2017-09-08

https://www.cbsnews.com/news/equifax-breach-response-criticized-for-wait-lawsuit-waiver/

Ares
8th September 2017, 10:53 AM
I'm also impacted. Check the site and shows that I am. They immediately ask you to enroll into their "Identity Protection" services. I'm like you're so inept to protect it to begin with, why the hell would I use your services even for free?

I already have an Identity protection service that comes part of my employment which I use for everyone in the family. Trying to find out if my wife was impacted or not.


"Criminals took advantage of a "U.S. website application vulnerability to gain access to certain files" from mid-May through July of this year...The intruders also accessed dispute documents with personal identifying information for about 182,000 consumers."

Otherwise known as an SQL Injection... this is what happens when you have morons in charge of security.

crimethink
8th September 2017, 11:05 AM
Otherwise known as an SQL Injection... this is what happens when you have morons in charge of security.

Outsourced?

crimethink
8th September 2017, 11:25 AM
Retroactive Opt-Out of Waiver:

https://www.washingtonpost.com/news/the-switch/wp/2017/09/08/what-to-know-before-you-check-equifaxs-data-breach-website/?utm_term=.a451b5141e28

Friday morning, after social media users began complaining about the arbitration clause, Equifax updated its terms of service to give consumers an escape hatch if they do not wish to be bound by its language.

Here's how the opt-out provision reads:

In order to exclude Yourself from the arbitration provision, You must notify Equifax in writing within 30 days of the date that You first accept this Agreement on the Site (for Products purchased from Equifax on the Site). …

[You] must include Your name, address, and Equifax User ID, as well as a clear statement that You do not wish to resolve disputes with Equifax through arbitration.

This language helps address some of the concerns, but it requires consumers to remember to write to Equifax.

Ares
8th September 2017, 12:06 PM
Outsourced?

The company I work for has done work for Equifax, but it was for an individual product and and nothing from what I can tell from past history in the department I'm in for database security or administration.

cheka.
8th September 2017, 12:40 PM
let me tell you my story.....ID stolen.....other drama

call the monopoly of credit crap and they tell me that i CANNOT block all credit requests permanently. i can only do a 3 month block. what is that about?

midnight rambler
8th September 2017, 12:50 PM
let me tell you my story.....ID stolen.....other drama

call the monopoly of credit crap and they tell me that i CANNOT block all credit requests permanently. i can only do a 3 month block. what is that about?

If you don't hold it you don't own it. lol

cheka.
8th September 2017, 12:59 PM
If you don't hold it you don't own it. lol

so bankster skype won't allow me to stop thieves from borrowing from them using 'my' identity. is this tied to the fictional person - thus they own it, not me?

midnight rambler
8th September 2017, 01:40 PM
so bankster skype won't allow me to stop thieves from borrowing from them using 'my' identity. is this tied to the fictional person - thus they own it, not me?

Indeed debt slave.

Hitch
8th September 2017, 02:50 PM
The company I work for has done work for Equifax, but it was for an individual product and and nothing from what I can tell from past history in the department I'm in for database security or administration.

Translation: I'm not 100% sure, but my company may be indirectly responsible for 143 million people getting effed. Way to go Ares! \uu\

madfranks
8th September 2017, 03:24 PM
Whew! Looks like I'm not affected, but they still want me to sign up for their protection plan:

https://s26.postimg.org/eqg8de3eh/Equifax.jpg

crimethink
8th September 2017, 03:28 PM
let me tell you my story.....ID stolen.....other drama

call the monopoly of credit crap and they tell me that i CANNOT block all credit requests permanently. i can only do a 3 month block. what is that about?

You requested a credit freeze and they said it was good for only three months?

crimethink
8th September 2017, 03:31 PM
so bankster skype won't allow me to stop thieves from borrowing from them using 'my' identity. is this tied to the fictional person - thus they own it, not me?

There is no fictional "person." They own YOU, personally. Or claim to, under Satanic law.

These are consequences of being part of the Mystery Babylon Financial System. Even if you don't ask for participation, (((they))) "participate" you anyway; everyone has a shadow credit file (including rambler).

cheka.
8th September 2017, 03:41 PM
You requested a credit freeze and they said it was good for only three months?

i misspoke - this is what i must've gotten into. the 7 year thing (nice number) was available i think...but had to jump through some stupid hoops - like going to police filing reports, etc

https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

What’s the difference between a credit freeze and a fraud alert?

A credit freeze locks down your credit. A fraud alert allows creditors to get a copy of your credit report as long as they take steps to verify your identity. For example, if you provide a telephone number, the business must call you to verify whether you are the person making the credit request. Fraud alerts may be effective at stopping someone from opening new credit accounts in your name, but they may not prevent the misuse of your existing accounts. You still need to monitor all bank, credit card and insurance statements for fraudulent transactions.

Three types of fraud alerts are available:

Initial Fraud Alert. If you're concerned about identity theft, but haven't yet become a victim, this fraud alert will protect your credit from unverified access for at least 90 days. You may want to place a fraud alert on your file if your wallet, Social Security card, or other personal, financial or account information are lost or stolen.

Extended Fraud Alert. For victims of identity theft, an extended fraud alert will protect your credit for seven years.

Active Duty Military Alert. For those in the military who want to protect their credit while deployed, this fraud alert lasts for one year.

To place a fraud alert on your credit reports, contact one of the nationwide credit reporting companies. A fraud alert is free. You must provide proof of your identity. The company you call must tell the other credit reporting companies; they, in turn, will place an alert on their versions of your report.

Ares
8th September 2017, 03:58 PM
Translation: I'm not 100% sure, but my company may be indirectly responsible for 143 million people getting effed. Way to go Ares! \uu\

Ha, the division I work in doesn't work with databases. :)

Also the individual backend product may not of even been produced by my company. Looking over account history I haven't seen a single case from them for DB assistance or maintenance.

crimethink
8th September 2017, 04:02 PM
i misspoke - this is what i must've gotten into. the 7 year thing (nice number) was available i think...but had to jump through some stupid hoops - like going to police filing reports, etc

Without the police report, these crooks will demand an exorbitant amount to place the credit freeze. Be warned that they will want the same or similar fee to lift the freeze.

Hitch
8th September 2017, 04:41 PM
Ha, the division I work in doesn't work with databases. :)

Also the individual backend product may not of even been produced by my company. Looking over account history I haven't seen a single case from them for DB assistance or maintenance.

Well, hackers are pretty good at hiding account history and case involvement. That's what they do. It sounds like you may have a coworker responsible for all of this. There's a 143 million people here taking it up the ass right now....you even mentioned a 'backend product'. Any coworkers from your company just cash out and retire recently?

:D

Ares
8th September 2017, 04:51 PM
Well, hackers are pretty good at hiding account history and case involvement. That's what they do. It sounds like you may have a coworker responsible for all of this. There's a 143 million people here taking it up the ass right now....you even mentioned a 'backend product'. Any coworkers from your company just cash out and retire recently?

:D

lol no, I meant the backend database product. There are a number out there. SQL, MySQL, DB2, Oracle, etc. that could be used to store that amount of data.

The real reason they got hacked, is most likely a quota or nepotism hire:

https://i.4cdn.org/pol/1504890471212.jpg

Chief Security Officer, and has a Masters degree in Music composition. :rolleyes:

Only has 15 years of experience, yet is a "Chief Security Officer" for a corporation you can't even choose not to do business with.

crimethink
8th September 2017, 04:52 PM
Chief Security Officer, and has a Masters degree in Music composition.

Degree? What degree? :D


Qualifications: Watching Mr. Robot religiously each week.

midnight rambler
8th September 2017, 05:24 PM
There is no fictional "person."

So tell us what the ALL CAPS NAME represents then.

Down1
8th September 2017, 05:56 PM
State by state info on credit freezes at link for TransUnion.
https://www.transunion.com/credit-freeze/place-credit-freeze

Credit freeze FedGov FAQs
https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

Hitch
8th September 2017, 07:13 PM
lol no, I meant the backend database product. There are a number out there. SQL, MySQL, DB2, Oracle, etc. that could be used to store that amount of data..

All I'm saying, is that backend product caused 143 million Americans to take it up the back end. That's the bottom line, no pun intended. Somebody's responsible. You sound guilty, btw.

crimethink
8th September 2017, 08:16 PM
So tell us what the ALL CAPS NAME represents then.

Nothing.

My "Certificate of Live Birth" says Crimethink The Goy, not CRIMETHINK THE GOY. I still don't have any special privileges.

The System claims ownership of all under its power by force of arms, not any silly shyster techniques.

midnight rambler
8th September 2017, 08:23 PM
Nothing.


Well, the ALL CAPS NONSENSE *does* mean SOMETHING but your pride (or ego, whichever) won't allow you to admit you don't know.

There's NO provision in the English language for the full capitalization of proper nouns. I know why the corporate state does that, it's called a 'conspicuous term or clause'. Why do you think some TOS agreements are in ALL CAPS? It's certainly not to make for easier reading. lol

crimethink
8th September 2017, 09:52 PM
Well, the ALL CAPS NONSENSE *does* mean SOMETHING but your pride (or ego, whichever) won't allow you to admit you don't know.

There's NO provision in the English language for the full capitalization of proper nouns. I know why the corporate state does that, it's called a 'conspicuous term or clause'. Why do you think some TOS agreements are in ALL CAPS? It's certainly not to make for easier reading. lol

What "special privileges" do I have because my "Certificate of Live Birth" is in normal capitalization? Can I violate malum prohibitum statutes with impunity? Can I collect special money?

ALL CAPS is just shystese stylistic bullshit. There is ZERO weight to it, except in your mind. The same goes for ///// appended on wills and similar documents. Same with idiotic "legal" size paper. "It's always been done that way." Stare decisis in all things for the Jewdicial system.