Equifax Breech

[frugalnacho]

Does anyone want to post some template verbiage that I can use to register a complaint to my attorney general?  I'd love to lodge a complaint, and encourage others to as well, but I think people will be a lot more inclined if we can make it easier.  I'm pissed off enough to spend 5 minutes finding the correct site and putting my 2 cents in, but I don't really have the time to think up an entire write up that would properly articulate my anger.

I know several other people have posted links to their attorney general and other places to register complaints in their state.  Some template verbiage and all those links collected in one place would be a great resource that would get a lot of people firing off complaints.

[hoping2retire35]

I was trying to think of some good legal means for this, our state AG seems like a good place to start. Our AG is wanting to run for Lieutenant Governor->Governor so this could be some good red meat for him.

[Michael in ABQ]

Does anyone want to post some template verbiage that I can use to register a complaint to my attorney general?  I'd love to lodge a complaint, and encourage others to as well, but I think people will be a lot more inclined if we can make it easier.  I'm pissed off enough to spend 5 minutes finding the correct site and putting my 2 cents in, but I don't really have the time to think up an entire write up that would properly articulate my anger.

I know several other people have posted links to their attorney general and other places to register complaints in their state.  Some template verbiage and all those links collected in one place would be a great resource that would get a lot of people firing off complaints.

Here's something you can use.

Following the recent data breach at Equifax, I like many Americans decided to place a security freeze on my credit report. I learned that most of the credit bureaus charge $5-10 for this service and then charge additional fees to later unfreeze your credit report if you are applying for a loan. Equifax has temporarily suspended charging for this service but I would like your office to push for eliminating these fees at all credit bureaus. We are being charged to secure our personal information that is collected by these third parties which they profit handsomely from. Just as all of the credit bureaus are now required to provide free annual credit reports, I believe they should be required to provide free security freezes/unfreezes.

[sobezen]

@Michael in ABQ:  Helpful template. Hopefully more people contact in writing their AG and heck even their Senator and governor to do something about this credit bureau debacle.

[RidetheRain]

Does anyone want to post some template verbiage that I can use to register a complaint to my attorney general?  I'd love to lodge a complaint, and encourage others to as well, but I think people will be a lot more inclined if we can make it easier.  I'm pissed off enough to spend 5 minutes finding the correct site and putting my 2 cents in, but I don't really have the time to think up an entire write up that would properly articulate my anger.

I know several other people have posted links to their attorney general and other places to register complaints in their state.  Some template verbiage and all those links collected in one place would be a great resource that would get a lot of people firing off complaints.

Here's something you can use.

Following the recent data breach at Equifax, I like many Americans decided to place a security freeze on my credit report. I learned that most of the credit bureaus charge $5-10 for this service and then charge additional fees to later unfreeze your credit report if you are applying for a loan. Equifax has temporarily suspended charging for this service but I would like your office to push for eliminating these fees at all credit bureaus. We are being charged to secure our personal information that is collected by these third parties which they profit handsomely from. Just as all of the credit bureaus are now required to provide free annual credit reports, I believe they should be required to provide free security freezes/unfreezes.

It might be worth pointing out in that template that "As I do not do business directly with Equifax and similar credit bureaus, I am unable to exercise dollar voting to indicate my approval or disapproval of their business practices. I have effectively no recourse beyond litigation to correct a wrong done by this company."

[Michael in ABQ]

@Michael in ABQ:  Helpful template. Hopefully more people contact in writing their AG and heck even their Senator and governor to do something about this credit bureau debacle.

Though I disagree with her on most things, Sen. Elizabeth Warren introduced legislation to make freezing your credit free.

https://www.reuters.com/article/us-equifax-cyber-warren/u-s-senator-warren-introduces-equifax-bill-launches-industry-probe-idUSKCN1BQ16B

[pablo]

So question. I was reading an article that indicated that, using SSN and such, it's possible for drivers licenses and/or doctors visits in your name. Then any resultant speeding tickets or med reconciliation issues would be on you. 1- any truth to this? 2- how do you detect if it happens? 3- any way to prevent this aspect of it?

Since those aren't tied to credit, I don't see that security freezes would have any bearing on them.

Your comment shows why the Equifax breach is far different from any previous breach in history: the Equifax breach is not really about credit at all. Your birthday, SS#, drivers license will never change! So unlike previous breaches, such as Target, where credit cards were exposed, there is no simple and permanent solution such as canceling your credit card. You can't cancel your SS# or birthday! While a credit freeze is an absolute must, it will not stop a determined thief from stealing your cell #, or impersonating you to clean out your bank accounts, or to use your id to commit crimes in your name.
This is a disaster and it is unrelated to credit.

[gggggg]

@Michael in ABQ:  Helpful template. Hopefully more people contact in writing their AG and heck even their Senator and governor to do something about this credit bureau debacle.

Though I disagree with her on most things, Sen. Elizabeth Warren introduced legislation to make freezing your credit free.

https://www.reuters.com/article/us-equifax-cyber-warren/u-s-senator-warren-introduces-equifax-bill-launches-industry-probe-idUSKCN1BQ16B

In NC, the state has made it free for NC citizens at all three companies. It is uncertain if this free service is temporary or permanent.

[gggggg]

So question. I was reading an article that indicated that, using SSN and such, it's possible for drivers licenses and/or doctors visits in your name. Then any resultant speeding tickets or med reconciliation issues would be on you. 1- any truth to this? 2- how do you detect if it happens? 3- any way to prevent this aspect of it?

Since those aren't tied to credit, I don't see that security freezes would have any bearing on them.

Your comment shows why the Equifax breach is far different from any previous breach in history: the Equifax breach is not really about credit at all. Your birthday, SS#, drivers license will never change! So unlike previous breaches, such as Target, where credit cards were exposed, there is no simple and permanent solution such as canceling your credit card. You can't cancel your SS# or birthday! While a credit freeze is an absolute must, it will not stop a determined thief from stealing your cell #, or impersonating you to clean out your bank accounts, or to use your id to commit crimes in your name.
This is a disaster and it is unrelated to credit.

This is why I signed up for identity theft insurance/monitoring/repair from a provider, in addition to freezing my credit. I felt these providers were kind of sketchy in the past, but I signed up for one and was decently impressed with what all they do.

[Valhalla]

@Michael in ABQ:  Helpful template. Hopefully more people contact in writing their AG and heck even their Senator and governor to do something about this credit bureau debacle.

Though I disagree with her on most things, Sen. Elizabeth Warren introduced legislation to make freezing your credit free.

https://www.reuters.com/article/us-equifax-cyber-warren/u-s-senator-warren-introduces-equifax-bill-launches-industry-probe-idUSKCN1BQ16B

Very nice.  I also like this article:  https://www.reuters.com/article/us-equifax-cyber-creditkarma/credit-karma-to-launch-free-id-monitoring-following-equifax-hack-idUSKCN1BQ2CJ

This industry is in need of a major overhaul.

[sobezen]

I concur! The regulations involving the credit bureaus and any company that collects your professional data needs to be overhauled.  This most recent breach highlights numerous flawswithin the industry.  Everything from the internal security systems, infrastructure, public relations, insider trading, and of course terrible management/leadership.

Were others even aware two senior executives actually QUIT after selling sizeable share quantities?  One individual happened to be responsible for Equifaxs "security".  I don't have her name because she is attempting to actively scrub her online history.  I will post more details shortly.

[RWD]

I concur! The regulations involving the credit bureaus and any company that collects your professional data needs to be overhauled.  This most recent breach highlights how the numerous flaws.  Everything from the internal security systems, infrastructure, public relations, insider trading, and of course terrible management/leadership.

Were others even aware two senior executives actually QUIT after selling sizeable share quantities?  One individual happened to be responsible for Equifaxs "security".  I don't have her name because she is attempting to actively scrub her online history.  I will post more details shortly.

Susan Mauldin.
https://it.slashdot.org/story/17/09/15/1910200/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer
https://it.slashdot.org/story/17/09/16/0244211/equifax-cso-retires-known-bug-was-left-unpatched-for-nearly-five-months

[sobezen]

Indeed this is the highly qualified and ethical person who quit. Cannot imagine why she feels the need to scrub her online identity.

https://secure.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15

[GuitarStv]

Indeed this is the highly qualified and ethical person who quit. Cannot imagine why she feels the need to scrub her online identity.

https://secure.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15

At least we can take solace in the fact that she's going to have to face the music (and is clearly in a lot of treble).

[frugalnacho]

Indeed this is the highly qualified and ethical person who quit. Cannot imagine why she feels the need to scrub her online identity.

https://secure.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15

At least we can take solace in the fact that she's going to have to face the music (and is clearly in a lot of treble).

*rim shot*

[fattest_foot]

I guess this shouldn't be surprising after we've learned how poor their security practices are.

http://www.npr.org/sections/thetwo-way/2017/09/19/552124551/equifax-confirms-another-security-incident

After the revelation that a cybersecurity breach at the international credit reporting agency Equifax exposed personal information of 143 million people, the company has confirmed an additional security incident with a payroll-related service in the months prior. It says the two are unrelated.

[RidetheRain]

I guess this shouldn't be surprising after we've learned how poor their security practices are.

http://www.npr.org/sections/thetwo-way/2017/09/19/552124551/equifax-confirms-another-security-incident

After the revelation that a cybersecurity breach at the international credit reporting agency Equifax exposed personal information of 143 million people, the company has confirmed an additional security incident with a payroll-related service in the months prior. It says the two are unrelated.

Do they think it's helping to say that the two are unrelated?

"We had a second breach... But don't worry, it wasn't related to the major hack - we had TWO exploitable holes!"

[Laa]

Do you think buying some of their stock would be a good idea?


They've been around for a long time, I don't think that this will be the end of them.



The higher up workers may have sold all of theirs thinking it will continue to go lower, but all I see is a rather solid history stock that's on sale.

[Exflyboy]

Do you think buying some of their stock would be a good idea?


They've been around for a long time, I don't think that this will be the end of them.



The higher up workers may have sold all of theirs thinking it will continue to go lower, but all I see is a rather solid history stock that's on sale.

Apart from the point that buying any individual stocks is much riskier than buying an index fund of course.

But generally the last thing I would want to do is to buy part of a company that I would love to see go down in flames along with the rest of the credit reporting company scams.

[With This Herring]

Do you think buying some of their stock would be a good idea?


They've been around for a long time, I don't think that this will be the end of them.



The higher up workers may have sold all of theirs thinking it will continue to go lower, but all I see is a rather solid history stock that's on sale.

Apart from the point that buying any individual stocks is much riskier than buying an index fund of course.

But generally the last thing I would want to do is to buy part of a company that I would love to see go down in flames along with the rest of the credit reporting company scams.

Buying their stock would be a gamble.  The price could go right back up, or they could be hit with enough fines, penalties, lawsuits, and other cleanup costs to bring the price down for years, send them bankrupt, or encourage another of the credit bureaus to make a takeover at a per-share price even lower than it is currently.  I'm sticking with indexes.

[sobezen]

Not sure if the risk is worth it if you are seriously considering buying the security.  I'd short it in the short term there is literally no way this company is going to quickly triage let alone,  repair the considerable damage. For Equifax this is a colossal clusterfuck and PR nightmare. Just my ten cents.

[clash]

Has anyone received their Chexsystems PIN through US mail?

Their call agents seem to be based in India and are very under trained.  Called them and was an eye opening and terrifying experience.

[clash]

Something else I haven't seen discussed is increasing the penalties for those who commit identity theft.  Does anyone know what the "standard" prison term is for that?  I'll be shocked if its something like 25 years or 35 years (which it should be)

[fattest_foot]

Not to pile on with a 2nd link today, but this is becoming comically bad. Honestly, if they're run this poorly, the government probably needs to step in and dissolve the company.

https://arstechnica.com/information-technology/2017/09/equifax-directs-breach-victims-to-fake-notification-site/?amp=1

In a tweet on Tuesday afternoon, an Equifax representative using the name Tim wrote: "Hi! For more information about the product and enrollment, please visit: securityequifax2017.com." The message came in response to a question about free credit monitoring Equifax is offering victims. The site is a knock-off of the official Equifax breach notification site, equifaxsecurity2017.com. A security researcher created the imposter site to demonstrate how easy it is to confuse a legitimate name with a bogus one. The Equifax tweet suggests that even company representatives can be easily fooled. The tweet was deleted late Wednesday morning, more than 18 hours after it went live.

It turns out Equifax has linked to the same fake domain since at least September 9, as evidenced by tweets here, here, and here. Unlike Tuesday's tweet, the September 9 tweets remained live when this post was going live, but were taken down shortly after that.

[Radagast]

Equifax is a hilarious institution. Too bad they knew so much about me.

[Exflyboy]

Equifax is a hilarious institution. Too bad they knew so much about me.

Yeah about as hilarious as cancer!

[robartsd]

I think we should call for legislation that would make credit reporting agencies liable for credit obtained with a stolen identity. Require that the credit reporting agency confirm that the application for new credit was authorized by the person identified in the credit report before providing the report to their customer (the lender). Prohibit credit reporting agencies from charing a fee to the person identified in the credit report. Basically freeze everyone's credit by default and provide free case by case thaws.

[BrandNewPapa]

Froze my Equifax ($0) and Experian ($5) today.

Tried to freeze my Transunion, made an account, filled out the form, clicked submit, then got an error telling me there wasn't enough information in my report to confirm my identity?! Gave me a phone number to call. Haven't done it yet.

Anyone else experience this? They've been pretty shady about trying to get people to sign up for the identify monitoring program. Wonder if this is part of the scam...get me on the phone and try to sell me.

[Fudge102]

Froze my Equifax ($0) and Experian ($5) today.

Tried to freeze my Transunion, made an account, filled out the form, clicked submit, then got an error telling me there wasn't enough information in my report to confirm my identity?! Gave me a phone number to call. Haven't done it yet.

Anyone else experience this? They've been pretty shady about trying to get people to sign up for the identify monitoring program. Wonder if this is part of the scam...get me on the phone and try to sell me.

I had one of them give me problems online.  Called them up and was able to do it over the phone no problem.  No different info was given so who knows how they work exactly...

[effigy98]

Froze my Equifax ($0) and Experian ($5) today.

Tried to freeze my Transunion, made an account, filled out the form, clicked submit, then got an error telling me there wasn't enough information in my report to confirm my identity?! Gave me a phone number to call. Haven't done it yet.

Anyone else experience this? They've been pretty shady about trying to get people to sign up for the identify monitoring program. Wonder if this is part of the scam...get me on the phone and try to sell me.

Yes and when I called them they told me to go back to that very same website and apply for the freeze. Let's just say I lost my temper to put it mildly... After about the 20th try over a 10 day period, the website finally accepted my information and said it did the freeze.

[BrandNewPapa]

Yes and when I called them they told me to go back to that very same website and apply for the freeze. Let's just say I lost my temper to put it mildly... After about the 20th try over a 10 day period, the website finally accepted my information and said it did the freeze.

Unbelievable!

[Exflyboy]

Is it true that Equifax is now allowing freeze/unfreeze for life at $zero cost?

[RWD]

Is it true that Equifax is now allowing freeze/unfreeze for life at $zero cost?

Starting at the end of January:
https://www.bloomberg.com/news/articles/2017-09-27/equifax-will-offer-free-credit-freezes-for-life-new-ceo-says

[BrandNewPapa]

Is it true that Equifax is now allowing freeze/unfreeze for life at $zero cost?

I just froze mine this week. It was no cost. Experian charged me $5. Located in Ohio.

[sobezen]

Is it true that Equifax is now allowing freeze/unfreeze for life at $zero cost?

Starting at the end of January:
https://www.bloomberg.com/news/articles/2017-09-27/equifax-will-offer-free-credit-freezes-for-life-new-ceo-says

Has anyone learned if the other credit bureaus are following Equifax?

[webguy]

I only just learned about this today after my bank's fraud department asked me to come to a branch with a photo ID as someone had tried to access my bank account using my personal information; credit card number, SSN, telephone number, address.  Luckily they didn't let them in and they sent out a new credit card.  I have frozen both mine and my wife's credit at all 3 credit bureaus and registered for the Equifax "Trusted ID" thing.  I also called Vanguard and another bank I am with to let them know and to set up any additional security measures.

Is there anything else anyone would suggest I do?  I already keep close tabs on my bank accounts and credit card transactions but this is pretty scary that someone had that information and called my bank trying to access my account!

[inline five]

I only just learned about this today after my bank's fraud department asked me to come to a branch with a photo ID as someone had tried to access my bank account using my personal information; credit card number, SSN, telephone number, address.  Luckily they didn't let them in and they sent out a new credit card.  I have frozen both mine and my wife's credit at all 3 credit bureaus and registered for the Equifax "Trusted ID" thing.  I also called Vanguard and another bank I am with to let them know and to set up any additional security measures.

Is there anything else anyone would suggest I do?  I already keep close tabs on my bank accounts and credit card transactions but this is pretty scary that someone had that information and called my bank trying to access my account!

I’m impressed they stopped it. I wonder how they knew...I don’t think they ask for anything else. That is really scary. What’s really scary is that info is in many folks hands. This Equifax thing is going to spiral out of control. I would suggest also calling your reps in Congress and telling them your story.

[dresden]

I have a credit freeze with all agencies.  I use an IRS pin so nobody can e-file a return under my name.  I use multi-factor authentication on all my key accounts and my email.

[sobezen]

So sad on so many levels but educational and true.

https://youtu.be/mPjgRKW_Jmk

[DarkandStormy]

Equifax CEO to Congress: Not Sure We Are Encrypting Data

https://www.wsj.com/articles/equifax-ceo-to-congress-not-sure-we-are-encrypting-data-1510180486

[farfromfire]

Equifax CEO to Congress: Not Sure We Are Encrypting Data

https://www.wsj.com/articles/equifax-ceo-to-congress-not-sure-we-are-encrypting-data-1510180486

This numbnuts has been working there since 2010, per LinkedIn.

[DarkandStormy]

https://www.vox.com/business-and-finance/2018/5/10/17337260/equifax-data-breach-passports

In a reversal of its previous denials, Equifax last week admitted that passports were involved in the data breach that exposed the data of millions of its customers. The credit reporting agency last September revealed that a data breach had left the personal information of about half of the American population exposed. In February, the company insisted that all that stolen data didn’t include passport numbers.

Except it did. The company in a recent regulatory filing slipped in the detail that more than 56,000 documents had been compromised in the breach, including passports.

[Bracken_Joy]

https://www.vox.com/business-and-finance/2018/5/10/17337260/equifax-data-breach-passports

In a reversal of its previous denials, Equifax last week admitted that passports were involved in the data breach that exposed the data of millions of its customers. The credit reporting agency last September revealed that a data breach had left the personal information of about half of the American population exposed. In February, the company insisted that all that stolen data didn’t include passport numbers.

Except it did. The company in a recent regulatory filing slipped in the detail that more than 56,000 documents had been compromised in the breach, including passports.

UGHHHHHHH. Thank you for bumping this with updates. Sucks utterly, but good to know.

Any way to find out yet if our passport was one of them?