for display only
Big Blue Interactive The Corner Forum  
Back to the Corner

Archived Thread

NFT: Massive data breach reported at Equifax

JoeMoney19 : 9/7/2017 4:46 pm
Details just starting to come out.

Quote:
Equifax Inc., which supplies credit information and other information services, said Thursday that a cybersecurity incident could have potentially affected 143 million consumers in the U.S.

Equifax said it discovered the breach on July 29. Leaked data includes names, birth dates, social security numbers, addresses and potentially drivers licenses. 209,000 U.S. credit card numbers were also obtained, in addition to "certain dispute documents with personal identifying information for approximately 182,000 U.S. consumers."


Link to CNBC
I worked  
XBRONX : 9/7/2017 4:51 pm : link
for a company that ripped off Equifax big time. Took them to the cleaners.
Some more details  
JoeMoney19 : 9/7/2017 4:53 pm : link
Quote:
Equifax Inc., which supplies credit information and other information services, said Thursday that a cybersecurity incident could have potentially affected 143 million consumers in the U.S.

The U.S. Census Bureau said the U.S. population was about 324 million people as of January 1, 2017, which means this affects a huge portion of the United States.

Equifax said it discovered the breach on July 29. "Criminals exploited a U.S. website application vulnerability to gain access to certain files," the company explained.

Leaked data includes names, birth dates, social security numbers, addresses and potentially drivers licenses. 209,000 U.S. credit card numbers were also obtained, in addition to "certain dispute documents with personal identifying information for approximately 182,000 U.S. consumers."

Equifax CEO and chairman Richard Smith said he recognizes this breach "strikes at the heart of who we are and what we do" and apologized to consumers and customers.

Equifax said it is now alerting customers whose information was included in the breach via mail, and is working with state and federal authorities. Its private investigation into the breach is complete.

Customers affected by the breach can sign up for credit monitoring and identity theft protection by visiting www.equifaxsecurity2017.com.
What do we do??  
DennyInDenville : 9/7/2017 4:57 pm : link
This effects literally every adult worth anything
This sounds like the plot of Mr. Robot  
gmen9892 : 9/7/2017 5:16 pm : link
I probably should be worried about this, but I am not sure what can even be done.
RE: What do we do??  
BrettNYG10 : 9/7/2017 5:20 pm : link
In comment 13587603 DennyInDenville said:
Quote:
This effects literally every adult worth anything


Most of BBI will be fine then.
Some irony here....  
Tesla : 9/7/2017 5:33 pm : link
The House of Reps had a hearing today on a bill that would drastically limit Equifax's liability when screwing over consumers. Bill sponsored by two house members from Georgia - where Equifax is based.

So if Equifax has its way you won't be able to do shit about this.
RE: What do we do??  
Giantology : 9/7/2017 5:36 pm : link
In comment 13587603 DennyInDenville said:
Quote:
This effects literally every adult worth anything


First step will be to delete your BBI account
RE: Some irony here....  
RAIN : 9/7/2017 5:36 pm : link
In comment 13587626 Tesla said:
Quote:
The House of Reps had a hearing today on a bill that would drastically limit Equifax's liability when screwing over consumers. Bill sponsored by two house members from Georgia - where Equifax is based.

So if Equifax has its way you won't be able to do shit about this.


Government working for the people! #citizensunited !!
RE: Some irony here....  
njm : 9/7/2017 5:43 pm : link
In comment 13587626 Tesla said:
Quote:
The House of Reps had a hearing today on a bill that would drastically limit Equifax's liability when screwing over consumers. Bill sponsored by two house members from Georgia - where Equifax is based.

So if Equifax has its way you won't be able to do shit about this.


Since this happened before the bill was passed and signed would it apply to this breech? Ex post facto limitation?
RE: RE: Some irony here....  
Tesla : 9/7/2017 6:06 pm : link
In comment 13587636 njm said:
Quote:
In comment 13587626 Tesla said:


Quote:


The House of Reps had a hearing today on a bill that would drastically limit Equifax's liability when screwing over consumers. Bill sponsored by two house members from Georgia - where Equifax is based.

So if Equifax has its way you won't be able to do shit about this.



Since this happened before the bill was passed and signed would it apply to this breech? Ex post facto limitation?


You can't pass a law that makes someone liable for retroactive conduct which was not unlawful at the time it occurred - but Congress can always pass laws to limit the liability of corporations (or anyone) for prior wrongdoing. It's happened plenty of times in the past.

I don't want to mislead anyone, the bill being debated might not be applicable to the instant data breach, but for sure one of the reasons these breaches keep occurring is because corporations get nothing more than a slap on the wrist for even massive data breaches.

The real problem is that one of the parties in Congress is completely on the side of our corporate overlords and could honestly care less about ordinary consumers. Of course I'm not allowed to say which one....and will probably banned for even saying as much as I have but I've spent my career dealing with these issues and it's the fucking truth.
RE: RE: Some irony here....  
Rflairr : 9/7/2017 6:11 pm : link
In comment 13587636 njm said:
Quote:
In comment 13587626 Tesla said:


Quote:


The House of Reps had a hearing today on a bill that would drastically limit Equifax's liability when screwing over consumers. Bill sponsored by two house members from Georgia - where Equifax is based.

So if Equifax has its way you won't be able to do shit about this.



Since this happened before the bill was passed and signed would it apply to this breech? Ex post facto limitation?


Its a Republican bill. Which means no doubt, its to help the Bureaus and stick it to the consumer. Like everything they do.
Everyone should check the website  
Diver_Down : 9/7/2017 6:52 pm : link
to see if they are eligible for the credit monitoring. If you are eligible, then that means your information was compromised. FML - I'm eligible.
https://www.equifaxsecurity2017.com/ - ( New Window )
effing July 29????  
ColHowPepper : 9/7/2017 7:00 pm : link
glad Equifax et al. are prompt and scrupulous with their alert, shits for brains
A few execs sold lots of  
bluepepper : 9/7/2017 7:12 pm : link
shares since July 29. Very prescient of them!

And no these weren't planned sales as is common with execs.

Quote:

None of the filings lists the transactions as being part of 10b5-1 pre-scheduled trading plans.

Link - ( New Window )
Surprised that the link says...  
Dan in the Springs : 9/7/2017 7:23 pm : link
I wasn't effected. Strange, actually.
RE: Surprised that the link says...  
DennyInDenville : 9/7/2017 7:40 pm : link
In comment 13587702 Dan in the Springs said:
Quote:
I wasn't effected. Strange, actually.

Same here, very weird

I'm not sold
How do you know that site  
DC Gmen Fan : 9/7/2017 8:07 pm : link
is legit? Maybe not a good idea to enter your PII on it?
RE: Some irony here....  
mdc1 : 9/7/2017 8:13 pm : link
In comment 13587626 Tesla said:
Quote:
The House of Reps had a hearing today on a bill that would drastically limit Equifax's liability when screwing over consumers. Bill sponsored by two house members from Georgia - where Equifax is based.

So if Equifax has its way you won't be able to do shit about this.


they will do what the federal government does, give you free credit monitoring although they f'd up and put everyone at risk....seems like we need a new age of technology as this present round is becoming obsolete.

RE: How do you know that site  
Diver_Down : 9/7/2017 8:19 pm : link
In comment 13587731 DC Gmen Fan said:
Quote:
is legit? Maybe not a good idea to enter your PII on it?


If you go to equifax.com, there is a warning banner that mentions the data breach with a link to the site that I linked.
RE: How do you know that site  
Dan in the Springs : 9/7/2017 9:11 pm : link
In comment 13587731 DC Gmen Fan said:
Quote:
is legit? Maybe not a good idea to enter your PII on it?


I wondered about it too - but they didn't ask for your full SS# or name - just partial. I figured it was probably worth the risk - that kind of info is not hard to find anyway.
They are hiding behind  
spike : 9/7/2017 9:28 pm : link
The upcoming Irma destruction
Equifax is one of those companies that let go american workers  
32_Razor : 9/7/2017 9:29 pm : link
in favor of H1B visas. I have no sympathy for them.
The free credit monitoring is worth what you pay for it  
jcn56 : 9/7/2017 10:01 pm : link
And not even, when the year is up and they decide to start charging you for it.

Consider either activating fraud alerting on your files or going all out with a security freeze, which would block people from pulling a credit report against you (you'd obviously have to lift the freeze before you planned on getting a new line of credit). It's not always free - can cost up to $60 - but it's worth it.
http://krebsonsecurity.com/2015/06/how-i-learned-to-stop-worrying-and-embrace-the-security-freeze/ - ( New Window )
I don't understand the logic  
Knineteen : 9/7/2017 10:06 pm : link
of these credit monitoring protection offers.

A corporation fucked up and compromised MY personal and sensitive information...yet they only offer x years of monitoring?

So, is my SS number going to change after x years?

How about lifetime credit monitoring since my lifetime information was stolen!
So if they give you an enrollment date  
PetesHereNow : 9/7/2017 10:14 pm : link
That means my info may have been compromised?
RE: RE: Surprised that the link says...  
montanagiant : 9/8/2017 1:14 am : link
In comment 13587714 DennyInDenville said:
Quote:
In comment 13587702 Dan in the Springs said:


Quote:


I wasn't effected. Strange, actually.


Same here, very weird

I'm not sold

Says I am eligible on 9-13
Someone needs to go to jail  
Beer Man : 9/8/2017 7:26 am : link
if the reports are true that company execs withheld news of the breach while they unloaded some of their company's stock.
Also ...  
Beer Man : 9/8/2017 7:28 am : link
From what I read, if you accept their free year of identity and credit protection you give up your right to sue them or take part in a class action.
RE: I don't understand the logic  
jcn56 : 9/8/2017 7:37 am : link
In comment 13587867 Knineteen said:
Quote:
of these credit monitoring protection offers.

A corporation fucked up and compromised MY personal and sensitive information...yet they only offer x years of monitoring?

So, is my SS number going to change after x years?

How about lifetime credit monitoring since my lifetime information was stolen!


Thank your government for that and the extremely generous window for notifications (this breach occurred in late July, which makes it one of the better ones in terms of delay).
RE: effing July 29????  
I Love Clams Casino : 9/8/2017 7:44 am : link
In comment 13587681 ColHowPepper said:
Quote:
glad Equifax et al. are prompt and scrupulous with their alert, shits for brains


They needed time to get the bill written up.....it's all very interesting
I checked...  
WideRight : 9/8/2017 9:33 am : link
My info was breached....

So they offer Equifax Premier to monitor, and they say I have to check in on 9/11 to enroll. They said they will not send any reminders. So it seems that they are offering it, because it sounds good, but they really don't want to help....
RE: I checked...  
spike : 9/8/2017 9:54 am : link
In comment 13588219 WideRight said:
Quote:
My info was breached....

So they offer Equifax Premier to monitor, and they say I have to check in on 9/11 to enroll. They said they will not send any reminders. So it seems that they are offering it, because it sounds good, but they really don't want to help....


I'm on the same boat.
RE: I checked...  
jcn56 : 9/8/2017 9:55 am : link
In comment 13588219 WideRight said:
Quote:
My info was breached....

So they offer Equifax Premier to monitor, and they say I have to check in on 9/11 to enroll. They said they will not send any reminders. So it seems that they are offering it, because it sounds good, but they really don't want to help....


Not because it sounds good, but because they're obligated by law to offer it to you after the breach.
RE: I checked...  
Diver_Down : 9/8/2017 10:10 am : link
In comment 13588219 WideRight said:
Quote:
My info was breached....

So they offer Equifax Premier to monitor, and they say I have to check in on 9/11 to enroll. They said they will not send any reminders. So it seems that they are offering it, because it sounds good, but they really don't want to help....


For those that are eligible, the delay signup is to accommodate the millions of people that qualify. By staggering the process, it ensures the enrollment process doesn't become bogged down with an overwhelming applicants at one time.
RE: Also ...  
JayBinQueens : 9/8/2017 10:13 am : link
In comment 13588104 Beer Man said:
Quote:
From what I read, if you accept their free year of identity and credit protection you give up your right to sue them or take part in a class action.

Where did you read that?
You know it's really shitty how Equifax is handling this  
montanagiant : 9/8/2017 10:39 am : link
There is no definitive way to tell 100% if you've been hacked and this crap of waiting a couple of months to inform everyone is complete horseshit.

Why do you get an enrollment date instead of :YES you have been hacked, or NO you are safe? What kind of monitoring are they giving? What happens if you get effected a year from now by this?
I just went on the website  
MadPlaid : 9/8/2017 10:43 am : link
and they indicated that my wife and I's data were not part of the breach. Sigh of relief.
***BE CAREFUL SIGNING UP FOR THEIR ENROLLMENT***  
armstead98 : 9/8/2017 10:54 am : link
As someone mentioned above I've heard that you forfeit the ability to sue them if you sign up. Also it doesn't really do anything other than just tell you if someone has stolen your identity, it doesn't offer any recovery or anything like that.

*I want to make clear that I've heard this second hand so not sure it's 100% true. So do your own homework but I thought worth mentioning in the event it is.
To clarify what's being alluded to above  
JoeMoney19 : 9/8/2017 11:36 am : link
Equifax TrustedID protection (provided to victims) ToS require you to agree to private arbitration; waive ability 4 class action suit.

RE: RE: Also ...  
Beer Man : 9/8/2017 11:38 am : link
In comment 13588275 JayBinQueens said:
Quote:
In comment 13588104 Beer Man said:


Quote:


From what I read, if you accept their free year of identity and credit protection you give up your right to sue them or take part in a class action.


Where did you read that?
I did a Google search to see if it was legit, I don't remember the site (as I read a few of them), but that's what they stated
Some very sketchy insider trading being reported as well  
JoeMoney19 : 9/8/2017 12:34 pm : link
Suspect trading in Equifax options before breach might have generated millions in profit
RE: Some very sketchy insider trading being reported as well  
Chris in Philly : 9/8/2017 12:53 pm : link
In comment 13588477 JoeMoney19 said:
Quote:
Suspect trading in Equifax options before breach might have generated millions in profit


I look forward to reading about all this in Michael Lewis' next book if my identity does not belong to a Ukranian gang member by then...
RE: You know it's really shitty how Equifax is handling this  
RinR : 9/8/2017 1:15 pm : link
In comment 13588297 montanagiant said:
Quote:
There is no definitive way to tell 100% if you've been hacked and this crap of waiting a couple of months to inform everyone is complete horseshit.


It is not complete horseshit. Law enforcement officials requested the delay to begin the investigation under the possibility the perps left bread crumbs or electronic fingerprints.
Which seems absurd to me. I get they want to catch people  
bhill410 : 9/8/2017 1:22 pm : link
but you are putting quite literally the entire adult population of the country at risk.
the website says that my information may have been compromised  
Steve in South Jersey : 9/8/2017 3:10 pm : link
it won't let me enroll in the protection service until 9/12.

Should I do a credit freeze? Is getting out of a credit freeze difficult?

RE: RE: Some very sketchy insider trading being reported as well  
Les in TO : 9/8/2017 3:40 pm : link
In comment 13588509 Chris in Philly said:
Quote:
In comment 13588477 JoeMoney19 said:


Quote:


Suspect trading in Equifax options before breach might have generated millions in profit



I look forward to reading about all this in Michael Lewis' next book if my identity does not belong to a Ukranian gang member by then...
Chris in Kiev has a nice ring to it
RE: RE: You know it's really shitty how Equifax is handling this  
Dan in the Springs : 9/8/2017 4:25 pm : link
In comment 13588537 RinR said:
Quote:
In comment 13588297 montanagiant said:


Quote:


There is no definitive way to tell 100% if you've been hacked and this crap of waiting a couple of months to inform everyone is complete horseshit.



It is not complete horseshit. Law enforcement officials requested the delay to begin the investigation under the possibility the perps left bread crumbs or electronic fingerprints.


Not sure why they don't use this same approach with other victims, seems like it might help them track rapists, serial killers, etc.

The first responsibility of law enforcement is to protect potential victims. Let's not forget that.
I subscribe to Lifelock  
Bubba : 9/9/2017 6:45 am : link
as a result of this recent data breach I checked my account and found the following:

Description4001 emails and passwords exposed in a Deep&Dark Web Forum.
Potential Typebreach
Potentially Impacted Websitecorner.bigblueinteractive.com
Where Foundweb
PasswordExposed Online

If you have not yet done so I suggest, as did Eric, change your BBI password!
Credit Freeze for kids  
JerebilJ : 9/9/2017 7:40 am : link
Does anyone have any experience setting a credit freeze for their underage kids? Seems like it is up to the states to allow it but not sure what NJ rules are. Any help is appreciated.
My information was part of the data breach  
Diver_Down : 9/9/2017 8:40 am : link
of the Social Security Administration back in Sept 2015. They offered credit monitoring and identity theft protection for 3 years through Identity Theft Guard Solutions LLC, doing business as ID Experts. I still have 1 year of free monitoring with their agreement at which time I will extend the service on my own. I've been very happy with the service offered and have not had a single incident related to my credit or identity.

For those that do not want to enroll in the Equifax credit monitoring offer for a year (and give up your right to arbitration), I would recommend the service offered through ID Experts.
Back to the Corner