Equifax customer information leak

Non-investing personal finance issues including insurance, credit, real estate, taxes, employment and legal issues such as trusts and wills
Almost there
Posts: 779
Joined: Thu Jan 03, 2008 7:06 pm
Location: Arizona USA

Re: Equifax customer information leak

Post by Almost there » Sun Sep 17, 2017 1:50 pm

F150HD wrote:
went to annualcreditreport.com today to get my free annual reports....had not viewed them this year so figured today was as good as any.

Was able to view and download Equifax and Transunion but Experian would not work. Stated I have to send in a paper form to request from them.

Anyone else have that issue?

Am frozen at all bureaus, so, unsure why 2 would work but 1 wouldn't.
Had the same thing happen with TransUnion.

User avatar
LadyGeek
Site Admin
Posts: 44482
Joined: Sat Dec 20, 2008 5:34 pm
Location: Philadelphia
Contact:

Re: Equifax customer information leak

Post by LadyGeek » Sun Sep 17, 2017 2:28 pm

Almost there wrote:
Sun Sep 17, 2017 1:25 pm
Received the following email today from Equifax:

It is time to take the final steps in enrolling in your free product, TrustedID Premier, by verifying your identity. To do this, you’ll need to answer some questions about yourself. Successfully completing this step will conclude your enrollment process and activate your product.
A verification email is tied to you alone. The link won't work for anyone else and may cause problems when multiple attempts are made to enter information which does not match your account.

Update: I removed the link.
Wiki To some, the glass is half full. To others, the glass is half empty. To an engineer, it's twice the size it needs to be.

User avatar
oneleaf
Posts: 2336
Joined: Mon Feb 19, 2007 5:48 pm

Re: Equifax customer information leak

Post by oneleaf » Tue Sep 19, 2017 3:18 am

Some slightly good news. Equifax refunded me and my wife the $10 freeze fee, without me needing to ask for it. Nice surprise when checking my credit card transactions today. A few days ago, they announced that freezes would be free for the next two months, but did not say how or if they would refund those who paid before the announcement. Nice that they did it automatically.

Mudpuppy
Posts: 5865
Joined: Sat Aug 27, 2011 2:26 am
Location: Sunny California

Re: Equifax customer information leak

Post by Mudpuppy » Tue Sep 19, 2017 10:57 am

But on the bad news front, Equifax also suffered a breach in March: http://money.cnn.com/2017/09/18/technol ... index.html

User avatar
F150HD
Posts: 1439
Joined: Fri Sep 18, 2015 7:49 pm

Re: Equifax customer information leak

Post by F150HD » Tue Sep 19, 2017 6:53 pm

Did Equifax mail you a confirmation letter with your PIN after you froze your account? (I know PIN is the timestamp but wondered if you still got a USPS letter confirmation)

Did Experian or Transunion mail you a confirmation letter with your PIN?

Almost there
Posts: 779
Joined: Thu Jan 03, 2008 7:06 pm
Location: Arizona USA

Re: Equifax customer information leak

Post by Almost there » Tue Sep 19, 2017 7:02 pm

F150HD wrote:
Did Equifax mail you a confirmation letter with your PIN after you froze your account? (I know PIN is the timestamp but wondered if you still got a USPS letter confirmation)

Did Experian or Transunion mail you a confirmation letter with your PIN?
I just logged in to Equifax website where I had to give them my personal info.
Immediately received an answer back with 5 questions so they could verify that it was me.
After I answered the questions (similar to what you might find when opening a Medicare or SS A/C and it is time sensitive), I received the following notice: Please allow 48 hours to process your request. It did not include a PIN. Will have to wait if I receive a letter confirmation.

Longtermgrowth
Posts: 518
Joined: Thu Nov 26, 2015 1:59 pm

Re: Equifax customer information leak

Post by Longtermgrowth » Wed Sep 20, 2017 1:46 am

Anyone here just place a fraud alert on one of the big three? By law they have to notify the rest, and it stays there for 90 days.
Would the fraud alert make freezing credit anymore difficult within the 90 day period? After all, currently we don't have 90 days left to place a free freeze on Equifax.

I think after all this, things should be changed so that we can place a lock or freeze on everything for free by selecting them from one of the big three, in addition to no cost to unlock/unfreeze our desired agency for specified amount of time.

User avatar
flamesabers
Posts: 1714
Joined: Fri Mar 03, 2017 12:05 pm
Location: Rochester, MN

Re: Equifax customer information leak

Post by flamesabers » Wed Sep 20, 2017 8:45 am

Longtermgrowth wrote:
Wed Sep 20, 2017 1:46 am
Anyone here just place a fraud alert on one of the big three? By law they have to notify the rest, and it stays there for 90 days.
Would the fraud alert make freezing credit anymore difficult within the 90 day period? After all, currently we don't have 90 days left to place a free freeze on Equifax.

I think after all this, things should be changed so that we can place a lock or freeze on everything for free by selecting them from one of the big three, in addition to no cost to unlock/unfreeze our desired agency for specified amount of time.
I put a fraud alert on my credit report. I didn't try to freeze my credit though. I think at most trying to freeze your credit (while it has a fraud alert) might entail having to send in extra documentation to verify your identity.

Mudpuppy
Posts: 5865
Joined: Sat Aug 27, 2011 2:26 am
Location: Sunny California

Re: Equifax customer information leak

Post by Mudpuppy » Wed Sep 20, 2017 10:14 am

Longtermgrowth wrote:
Wed Sep 20, 2017 1:46 am
Anyone here just place a fraud alert on one of the big three? By law they have to notify the rest, and it stays there for 90 days.
Would the fraud alert make freezing credit anymore difficult within the 90 day period? After all, currently we don't have 90 days left to place a free freeze on Equifax.
I've had fraud alerts on my file in the past, since I had a credit card number stolen back in the 1990s (a merchant's employee decided to copy customers' credit card numbers to support her Christmas shopping spree). The fraud alert didn't really do much other than make some creditors ask a set of questions based on my credit report. Even though I had a phone number in the fraud alert, no one ever called it to verify before issuing credit. Maybe they would now that cell phones are more common.
Longtermgrowth wrote:
Wed Sep 20, 2017 1:46 am
I think after all this, things should be changed so that we can place a lock or freeze on everything for free by selecting them from one of the big three, in addition to no cost to unlock/unfreeze our desired agency for specified amount of time.
That's getting into the topic of pending legislation, since such a bill has already been proposed, which is a forbidden topic in this forum. As with all such matters, contact your local representative and senators to express your concerns.

knightrider
Posts: 219
Joined: Fri Jun 06, 2014 11:20 am

Re: Equifax customer information leak

Post by knightrider » Wed Sep 20, 2017 1:11 pm

Late to the thread, but here's my 2 cents:

The media only focuses on the known data breaches. But what about the unknown ones, i.e where data is stolen but nobody in the company knows? My guess is this happens a lot more often than known ones.

In digital theft, the original data is left intact. So nobody really knows you copied it. It might get buried in some terabytes of logs that nobody reads.
Last edited by knightrider on Wed Sep 20, 2017 1:52 pm, edited 1 time in total.

User avatar
DaftInvestor
Posts: 3755
Joined: Wed Feb 19, 2014 10:11 am

Re: Equifax customer information leak

Post by DaftInvestor » Wed Sep 20, 2017 1:47 pm

knightrider wrote:
Wed Sep 20, 2017 1:11 pm
Late to the thread, but here's my 2 cents:

The media only focuses on the known data breaches. But what about the unknown ones, i.e where data is stolen but nobody in the company know? My guess is this happens a lot more often than known ones.

In digital theft, the original data is left intact. So nobody really knows you copied it. It might get buried in some terabytes of logs that nobody reads.
But a company like Equifax should have multiple levels of security protection and inspection. They shouldn't rely on log-files alone - they should have multiple layers (Firewall at Perimeter with protections/logging, internal packet inspection in the data center, log files on the server, log collection and analysis systems, traffic-flow collection and analysis systems, etc.). If someone has accessed sensitive data there should be multiple alarms going off. If it has been accessed it can be assumed that it has been copied. Nothing is full-proof - but there are many ways to protect data and many failures that occurred at Equifax causing the breach (starting with them not patching against a known-vulnerability).

knightrider
Posts: 219
Joined: Fri Jun 06, 2014 11:20 am

Re: Equifax customer information leak

Post by knightrider » Wed Sep 20, 2017 2:05 pm

DaftInvestor wrote:
Wed Sep 20, 2017 1:47 pm
But a company like Equifax should have multiple levels of security protection and inspection.
I suppose so, but what about the many companies that can't afford this level of protection? For example many federal and state websites require entry of a lot of personal information. These sites look rather primitively designed. I doubt they have staff to proactively monitor network security at each layer.

Also with more layers of protection comes more complexity. In such situations the big picture gets lost. This leaves exploitable gaps where everyone "assumes" everyone else was looking after it.

User avatar
DaftInvestor
Posts: 3755
Joined: Wed Feb 19, 2014 10:11 am

Re: Equifax customer information leak

Post by DaftInvestor » Wed Sep 20, 2017 2:27 pm

knightrider wrote:
Wed Sep 20, 2017 2:05 pm
DaftInvestor wrote:
Wed Sep 20, 2017 1:47 pm
But a company like Equifax should have multiple levels of security protection and inspection.
I suppose so, but what about the many companies that can't afford this level of protection? For example many federal and state websites require entry of a lot of personal information. These sites look rather primitively designed. I doubt they have staff to proactively monitor network security at each layer.

Also with more layers of protection comes more complexity. In such situations the big picture gets lost. This leaves exploitable gaps where everyone "assumes" everyone else was looking after it.
They all do. The number and expertise of staff of course varies and if proper checks and balances aren't in place - something like equifax happens. There are security compliance and auditing standards (For the case of federal its FISMA; there's HIPPA for healthcare; PCI for anyone that processes credit card; etc.) in place that check up on things. Nothing is full proof - but things aren't quite as dire as you stated either.

Nicolas
Posts: 883
Joined: Wed Aug 22, 2012 7:41 am

Re: Equifax customer information leak

Post by Nicolas » Wed Sep 20, 2017 3:44 pm

Equifax tweets fake phishing site to concerned customers.
http://money.cnn.com/2017/09/20/technol ... index.html
I'd rather be thin than famous -- Jack Kerouac

User avatar
DaftInvestor
Posts: 3755
Joined: Wed Feb 19, 2014 10:11 am

Re: Equifax customer information leak

Post by DaftInvestor » Wed Sep 20, 2017 3:46 pm

Nicolas wrote:
Wed Sep 20, 2017 3:44 pm
Equifax tweets fake phishing site to concerned customers.
http://money.cnn.com/2017/09/20/technol ... index.html
Do people really follow Equifax on twitter? Yikes...

User avatar
nisiprius
Advisory Board
Posts: 35468
Joined: Thu Jul 26, 2007 9:33 am
Location: The terrestrial, globular, planetary hunk of matter, flattened at the poles, is my abode.--O. Henry

Re: Equifax customer information leak

Post by nisiprius » Wed Sep 20, 2017 4:04 pm

F150HD wrote:
Sun Sep 17, 2017 1:37 pm
went to annualcreditreport.com today to get my free annual reports....had not viewed them this year so figured today was as good as any.

Was able to view and download Equifax and Transunion but Experian would not work. Stated I have to send in a paper form to request from them.

Anyone else have that issue?

Am frozen at all bureaus, so, unsure why 2 would work but 1 wouldn't.
It's a mess. I tried and I was able to get one from Experian, but not from either Equifax or TransUnion.

What I found very unsettling was that Equifax took all my information, and then said I had to answer four questions to verify my ID. Now, I've gone through this drill before and usually two or three of them are fairly easy and relate to places I've really lived, cars I've really owned... and then one or two that are "crazy" and for which the correct answer was "none of the above."

This time, I got four "crazy" questions, to which the answer was "none of the above." One was about a student loan (I'm retired). Two of them were very troubling because the first asked me where I'd gotten a car loan (I don't have a car loan, so answered "none of the above") and the next asked me for the approximate size of the monthly payment on my car loan. I swear, if I didn't think Equifax was just royally screwed up I'd actually be quite worried about identity theft at this point.
Annual income twenty pounds, annual expenditure nineteen nineteen and six, result happiness; Annual income twenty pounds, annual expenditure twenty pounds ought and six, result misery.


greetje
Posts: 262
Joined: Sun Jan 27, 2008 7:58 am

Re: Equifax customer information leak

Post by greetje » Wed Sep 20, 2017 4:55 pm

Just found this in my thrash on my e mail account. Sept 10th it arrived.
This was about the same time I filled out the Equifax form which wanted my ss #
Is this legit or another scam. I have not phoned them.
Have not heard back from Equifax after they said I was probably impacted.

ALERT! EQUIFAX HAS BEEN HACKED!

CALL ACCOUNT SECURITY ASAP

Our Security Department has detected criminals using your Social Security number online. Call now to get it stopped.

844-267-5473

Please make sure you stay on the line after you press 1. Our security specialists are overloaded. Please wait a maximum time of 3 min.

bayview
Posts: 1423
Joined: Thu Aug 02, 2012 7:05 pm
Location: WNC

Re: Equifax customer information leak

Post by bayview » Wed Sep 20, 2017 4:59 pm

greetje wrote:
Wed Sep 20, 2017 4:55 pm
Just found this in my thrash on my e mail account. Sept 10th it arrived.
This was about the same time I filled out the Equifax form which wanted my ss #
Is this legit or another scam. I have not phoned them.
Have not heard back from Equifax after they said I was probably impacted.

ALERT! EQUIFAX HAS BEEN HACKED!

CALL ACCOUNT SECURITY ASAP

Our Security Department has detected criminals using your Social Security number online. Call now to get it stopped.

844-267-5473

Please make sure you stay on the line after you press 1. Our security specialists are overloaded. Please wait a maximum time of 3 min.
Looks like blatant phishing to me.

eta: I seriously doubt that a legit email would feature the phrase "Equifax has been hacked."
The continuous execution of a sound strategy gives you the benefit of the strategy. That's what it's all about. --Rick Ferri

angelbell
Posts: 35
Joined: Thu Feb 19, 2009 4:15 pm

Re: Equifax customer information leak

Post by angelbell » Wed Sep 20, 2017 5:00 pm

greetje wrote:
Wed Sep 20, 2017 4:55 pm
Just found this in my thrash on my e mail account. Sept 10th it arrived.
This was about the same time I filled out the Equifax form which wanted my ss #
Is this legit or another scam. I have not phoned them.
Have not heard back from Equifax after they said I was probably impacted.

ALERT! EQUIFAX HAS BEEN HACKED!

CALL ACCOUNT SECURITY ASAP

Our Security Department has detected criminals using your Social Security number online. Call now to get it stopped.

844-267-5473

Please make sure you stay on the line after you press 1. Our security specialists are overloaded. Please wait a maximum time of 3 min.
http://800notes.com/Phone.aspx/1-844-267-5473

http://www.azcentral.com/story/opinion/ ... 678377001/

greetje
Posts: 262
Joined: Sun Jan 27, 2008 7:58 am

Re: Equifax customer information leak

Post by greetje » Wed Sep 20, 2017 5:12 pm

Thank you' I figured it was a scam but still worried.
Thanks for the information especially that link to the phone number.

User avatar
F150HD
Posts: 1439
Joined: Fri Sep 18, 2015 7:49 pm

Re: Equifax customer information leak

Post by F150HD » Wed Sep 20, 2017 7:08 pm

What are the real long term impacts on the economy of this all occurring?

User avatar
F150HD
Posts: 1439
Joined: Fri Sep 18, 2015 7:49 pm

Re: Equifax customer information leak

Post by F150HD » Wed Sep 20, 2017 7:21 pm

DaftInvestor wrote:
Wed Sep 20, 2017 3:46 pm
Do people really follow Equifax on twitter? Yikes...
.....sounds like an empty life.

Kinda like listening to a chess match on the radio.

:-?

KlangFool
Posts: 8445
Joined: Sat Oct 11, 2008 12:35 pm

Re: Equifax customer information leak

Post by KlangFool » Fri Sep 22, 2017 7:56 am

Folks,

1) How long should I wait for the TrustedID sign up email?

2) I had registered on 9/12 for my wife and 9/13 for myself.

3) What will be sender's email address?

Thanks.

KlangFool

User avatar
siamond
Posts: 3823
Joined: Mon May 28, 2012 5:50 am

Re: Equifax customer information leak

Post by siamond » Fri Sep 22, 2017 8:57 am

KlangFool wrote:
Fri Sep 22, 2017 7:56 am
1) How long should I wait for the TrustedID sign up email?

2) I had registered on 9/12 for my wife and 9/13 for myself.

3) What will be sender's email address?
I just received mine, and I registered on 9/13, so... hopefully, you're close. The sender e-mail is "Trusted ID Customer Service".

KlangFool
Posts: 8445
Joined: Sat Oct 11, 2008 12:35 pm

Re: Equifax customer information leak

Post by KlangFool » Fri Sep 22, 2017 9:27 am

siamond wrote:
Fri Sep 22, 2017 8:57 am
KlangFool wrote:
Fri Sep 22, 2017 7:56 am
1) How long should I wait for the TrustedID sign up email?

2) I had registered on 9/12 for my wife and 9/13 for myself.

3) What will be sender's email address?
I just received mine, and I registered on 9/13, so... hopefully, you're close. The sender e-mail is "Trusted ID Customer Service".
Thanks.

KlangFool

bogle22
Posts: 4
Joined: Sat Nov 16, 2013 2:23 pm

Re: Equifax customer information leak

Post by bogle22 » Fri Sep 22, 2017 9:49 am

Received my enrollment email. Said I already had activated, tried to change password to get in, says it cannot enroll me. Help desk disconnected me and said I have to talk to customer support. Called customer support and told me to try again.

naranja
Posts: 5
Joined: Sun Sep 17, 2017 2:10 pm

Re: Equifax customer information leak

Post by naranja » Fri Sep 22, 2017 10:55 am

bogle22 wrote:
Fri Sep 22, 2017 9:49 am
Received my enrollment email. Said I already had activated, tried to change password to get in...
I'm in the same situation they just told me the web site is crashed by too many users and I should try again in 24-48 hours.

User avatar
JMacDonald
Posts: 2066
Joined: Mon Feb 19, 2007 5:53 pm

Re: Equifax customer information leak

Post by JMacDonald » Sat Sep 23, 2017 8:42 pm

Experian is trying to cash in on this leak:
LA Times: Credit agency Experian says it can protect you from the 'dark Web' — sort of
http://www.latimes.com/business/lazarus ... story.html
Best Wishes, | Joe

User avatar
runner26
Posts: 480
Joined: Sat Apr 07, 2007 9:39 pm
Location: California

Re: Equifax customer information leak

Post by runner26 » Sun Sep 24, 2017 3:02 pm

I registered the 13th. Got my e-mail last night to set up premier monitor. Tried the process which goes very very slowly. Got to create my password part, hit send, spinning wheel never goes away. Had to leave house, so just x-ed out. Came home to try the process again, and it said I had already set up my account, just log in. Tried to log in and get invalid userid/password. Clicked on reset password and have been waiting for some time for a reset e-mail.

This company need to be out of business!!! Sell it to one of the other two, and use the funds to provide free credit freezes to the rest of us.

User avatar
zaplunken
Posts: 877
Joined: Tue Jul 01, 2008 9:07 am

Re: Equifax customer information leak

Post by zaplunken » Sun Sep 24, 2017 7:42 pm

I'm concerned.

On 9/12 I ordered a credit report from Innovis, they said 3-5 business days, where the heck is it?

On 9/13 I went to the Chex Systems and requested a freeze and they said I'd get a letter with a pin and instructions in 3 business days, where the heck is it?

I'm going to try to call or somehow contact them Monday but I suppose this is delayed due to volume or maybe they sent this stuff to the wrong place?

tj
Posts: 2051
Joined: Thu Dec 24, 2009 12:10 am

Re: Equifax customer information leak

Post by tj » Sun Sep 24, 2017 7:50 pm

I received the ChexSystems pin on Friday and the Innovis pin yesterday. I froze them the day we all heard about the hooplah.

They're probably swamped with lots of requests. I wouldn't worry about it.

AntsOnTheMarch
Posts: 582
Joined: Mon May 29, 2017 5:47 pm

Re: Equifax customer information leak

Post by AntsOnTheMarch » Sun Sep 24, 2017 8:25 pm

I just received the Chex pins. I got mine Friday and DW's came on Saturday. I got my credit reports for the big 3 online but I had to write in for the wife. One (TransUnion) came in Saturday. Still awaiting 2 others. Also due, 2 more institutions owe me credit freeze PINs after they said 3 biz days (it's beyond that now). I'm not concerned. I think everyone was overwhelmed by this breach. May have to go back and follow up after a suitable time but I'll wait to see what shows up next week.

User avatar
DaftInvestor
Posts: 3755
Joined: Wed Feb 19, 2014 10:11 am

Re: Equifax customer information leak

Post by DaftInvestor » Mon Sep 25, 2017 1:07 pm

zaplunken wrote:
Sun Sep 24, 2017 7:42 pm
I'm concerned.

On 9/12 I ordered a credit report from Innovis, they said 3-5 business days, where the heck is it?

On 9/13 I went to the Chex Systems and requested a freeze and they said I'd get a letter with a pin and instructions in 3 business days, where the heck is it?

I'm going to try to call or somehow contact them Monday but I suppose this is delayed due to volume or maybe they sent this stuff to the wrong place?
On 9/8 we (spouse and I) froze both Chex and Innovis. We also ordered credit reports from both. We got the credit reports within a week. We got the Chex PINs on Friday 9/22. I have yet to get an Innovis freeze PIN. I will wait another week before I call. I assume its due to the huge number of folks they need to process.

keith_h
Posts: 4
Joined: Fri Oct 07, 2016 1:07 pm

Re: Equifax customer information leak

Post by keith_h » Mon Sep 25, 2017 7:18 pm

DaftInvestor wrote:
Mon Sep 25, 2017 1:07 pm
zaplunken wrote:
Sun Sep 24, 2017 7:42 pm
I'm concerned.

On 9/12 I ordered a credit report from Innovis, they said 3-5 business days, where the heck is it?

On 9/13 I went to the Chex Systems and requested a freeze and they said I'd get a letter with a pin and instructions in 3 business days, where the heck is it?

I'm going to try to call or somehow contact them Monday but I suppose this is delayed due to volume or maybe they sent this stuff to the wrong place?
On 9/8 we (spouse and I) froze both Chex and Innovis. We also ordered credit reports from both. We got the credit reports within a week. We got the Chex PINs on Friday 9/22. I have yet to get an Innovis freeze PIN. I will wait another week before I call. I assume its due to the huge number of folks they need to process.
I had the same concerns today. Froze Innovis and Chex on 9/11 and as of today I have not received anything from them. I feel slightly better seeing others have had to wait several weeks.

User avatar
AAA
Posts: 930
Joined: Sat Jan 12, 2008 8:56 am

Re: Equifax customer information leak

Post by AAA » Mon Sep 25, 2017 7:46 pm

keith_h wrote:
Mon Sep 25, 2017 7:18 pm
I had the same concerns today. Froze Innovis and Chex on 9/11 and as of today I have not received anything from them. I feel slightly better seeing others have had to wait several weeks.
I just got the Chex confirmation letter with PIN number today, exactly two weeks after setting up the freeze online. Innovis was a little faster.

AntsOnTheMarch
Posts: 582
Joined: Mon May 29, 2017 5:47 pm

Re: Equifax customer information leak

Post by AntsOnTheMarch » Mon Sep 25, 2017 10:23 pm

Today, I got both Innovis pins (DW's and mine). So I'm caught up with all freezes.

I also got the second of 3 requested credit reports for DW (had to request her reports by mail for some reason). Now the kicker. Instead of receiving her credit report from equifax, they sent her a letter asking for a bunch of photocopies for proof of ID. This company is a hot mess. Good luck to anyone relying on them for anything. I just hope the credit freeze and algorithmic PIN they did for me online hold up if I ever have to unfreeze the account.

User avatar
Pajamas
Posts: 4695
Joined: Sun Jun 03, 2012 6:32 pm

Re: Equifax customer information leak

Post by Pajamas » Tue Sep 26, 2017 8:26 am

The C.E.O. of Equifax is OUT. Maybe they are finally on the way to "taking this seriously".

https://www.nytimes.com/2017/09/26/busi ... x-ceo.html

bklyn96
Posts: 133
Joined: Thu Apr 02, 2015 8:12 am

Re: Equifax customer information leak

Post by bklyn96 » Tue Sep 26, 2017 8:56 am

keith_h wrote:
Mon Sep 25, 2017 7:18 pm
I had the same concerns today. Froze Innovis and Chex on 9/11 and as of today I have not received anything from them. I feel slightly better seeing others have had to wait several weeks.
We also froze both Innovis and Chex on 9/11. Recently received mail responses—Innovis on 9/22 and Chex on 9/25

User avatar
DaftInvestor
Posts: 3755
Joined: Wed Feb 19, 2014 10:11 am

Re: Equifax customer information leak

Post by DaftInvestor » Tue Sep 26, 2017 9:03 am

DaftInvestor wrote:
Mon Sep 25, 2017 1:07 pm
zaplunken wrote:
Sun Sep 24, 2017 7:42 pm
I'm concerned.

On 9/12 I ordered a credit report from Innovis, they said 3-5 business days, where the heck is it?

On 9/13 I went to the Chex Systems and requested a freeze and they said I'd get a letter with a pin and instructions in 3 business days, where the heck is it?

I'm going to try to call or somehow contact them Monday but I suppose this is delayed due to volume or maybe they sent this stuff to the wrong place?
On 9/8 we (spouse and I) froze both Chex and Innovis. We also ordered credit reports from both. We got the credit reports within a week. We got the Chex PINs on Friday 9/22. I have yet to get an Innovis freeze PIN. I will wait another week before I call. I assume its due to the huge number of folks they need to process.
Update: Received our Innovis PINs in yesterday's mail. So with a 9/8 Freeze - we got our PINs on 9/25. Interesting how some that froze later got their PINs sooner - obviously not a first-come first-served business.

User avatar
F150HD
Posts: 1439
Joined: Fri Sep 18, 2015 7:49 pm

Re: Equifax customer information leak

Post by F150HD » Tue Sep 26, 2017 9:16 am

Pajamas wrote:
Tue Sep 26, 2017 8:26 am
The C.E.O. of Equifax is OUT. Maybe they are finally on the way to "taking this seriously".

https://www.nytimes.com/2017/09/26/busi ... x-ceo.html
just saw that on CNBC. No trust for this company. I wonder what the October hearings will bring?

https://www.cnbc.com/2017/09/26/equifax ... eople.html

learning_head
Posts: 832
Joined: Sat Apr 10, 2010 6:02 pm

Re: Equifax customer information leak

Post by learning_head » Tue Sep 26, 2017 9:27 am

Pajamas wrote:
Tue Sep 26, 2017 8:26 am
The C.E.O. of Equifax is OUT. Maybe they are finally on the way to "taking this seriously".

https://www.nytimes.com/2017/09/26/busi ... x-ceo.html
Won't make a bit of difference. The whole system is broken and setup with wrong incentives, and a forced early retirement of CEO is not going fix it...

- Having to deal with multiple agencies, each with their own security issues (including Innovis, Chexsystems, and a lot of others). I could see the point of multiple agencies if I could choose which one has my data (e.g. based on which one I think is most secure or gives me most control over my data). This would result in CRAs competing with each other to be the most secure and user friendly; but instead, my data is in ALL of them, meaning any hacker just needs to find a weakness (which that specific hacker is most proficient in exploiting) in ANY one of them to get to my data. Plus, CRAs don't care about being user-friendly for us but instead they are competing to be more user friendly for businesses that use them - their real customers.

- Having to pay for freeze/unfreeze/thaw

- Inability to instantly turn on and off freeze instead of leaving them out unfrozen at the granularity of a day (cleary TransUnion has capabilities of doing so easily for their own "lock" feature but they do not expose it for the real freeze)

- Having to renew fraud alert every 90 days if you want to be notified first each time there is account opened in your name (as preventative measure)

- Not having free credit monitoring provided by CRAs (yes, you can get it via other companies like CreditKarma + others, but those are yet more companies with access to your sensitive data and making money off of ads and other ways from that data)

- Having no way to specify you only want your credit report open to specific entity for specific time (some CRAs allow this, others don't)

- A ton of complaints about CRAs about not timely fixing errors

- Overall CRA reason for existence - they are not there to help us but to use our data to sell their product to businesses. Our private data is the product. CRAs have some of the lowest customer satisfactions out there. I read how it used to be CRA agents were incentivized to create fake issues for random customers (ala Wells Fargo with fake accounts) to show their business customers they service a real purpose of identifying bad apples vs good. I am assuming / hoping it's no longer the case but just shows where they come from and why "customer satisfaction" in CRA world does *not* apply to people whose data is being tracked.

Mudpuppy
Posts: 5865
Joined: Sat Aug 27, 2011 2:26 am
Location: Sunny California

Re: Equifax customer information leak

Post by Mudpuppy » Tue Sep 26, 2017 9:52 am

learning_head wrote:
Tue Sep 26, 2017 9:27 am
- Having to deal with multiple agencies, each with their own security issues (including Innovis, Chexsystems, and a lot of others). I could see the point of multiple agencies if I could choose which one has my data (e.g. based on which one I think is most secure or gives me most control over my data). This would result in CRAs competing with each other to be the most secure and user friendly; but instead, my data is in ALL of them, meaning any hacker just needs to find a weakness (which that specific hacker is most proficient in exploiting) in ANY one of them to get to my data. Plus, CRAs don't care about being user-friendly for us but instead they are competing to be more user friendly for businesses that use them - their real customers.
In the era of Big Data, far more than the plethora of credit bureaus have information on you that could cause you harm if they are breached. Most of them are only regulated by standard PII (personally identifiable information) rules, and perhaps an industry-specific rule such as HIPAA for medical. Most of them make big bucks off building patterns from your data that have value to other companies.

There's a saying in tech that goes to the effect of the following: if a service that costs a great deal of money to maintain is free to use, then the product is you. It's sort of the technology variation on "there's no such thing as a free lunch".

This breach is just the tip of the iceberg really. Much like how the Target breach illuminated the perils of mag-stripe credit cards, this breach illuminates the perils of wide-spread data collection of personal information.

One a related note, this Consumer Reports article illustrates the other ways the stolen Equifax data can be used to harm you, such as medical fraud or criminals giving your identity when they are caught by police: https://www.consumerreports.org/equifax ... h-threats/

URSnshn
Posts: 143
Joined: Sun Mar 13, 2016 6:10 pm

Re: Equifax customer information leak

Post by URSnshn » Tue Sep 26, 2017 12:24 pm

How is the average person suppose to 1) understand the ramifications of all this, and 2) actually put it all into place? Most people I know eye's understandably glaze over at the topic and/or feel paralyzed by it all.

User avatar
Pajamas
Posts: 4695
Joined: Sun Jun 03, 2012 6:32 pm

Re: Equifax customer information leak

Post by Pajamas » Tue Sep 26, 2017 2:27 pm

learning_head wrote:
Tue Sep 26, 2017 9:27 am


Won't make a bit of difference. The whole system is broken and setup with wrong incentives, and a forced early retirement of CEO is not going fix it...
Agreed, and his $18 million annual pension isn't making me feel any better about it. With this breach, Pandora's box is open and can't be shut again.

User avatar
zaplunken
Posts: 877
Joined: Tue Jul 01, 2008 9:07 am

Re: Equifax customer information leak

Post by zaplunken » Tue Sep 26, 2017 2:35 pm

URSnshn wrote:
Tue Sep 26, 2017 12:24 pm
How is the average person suppose to 1) understand the ramifications of all this, and 2) actually put it all into place? Most people I know eye's understandably glaze over at the topic and/or feel paralyzed by it all.
Good point.

Honestly I felt I had everything really under control and locked down. Password safe stored on a thumb drive with 2 copies on 2 other thumb drives and a print out in my safe deposit box, long complex random userids, passwords, security question answers that are just as meaningless, credit freeze with all 3 bureaus and now Innovis and Chex Systems, I monitor my 2 credit card statements carefully, credit score of 815 to 824, heck I'm all set. Frankly this has exposed how vulnerable I am despite all my best efforts and at this point I just give up. I have done all I can but with the piss poor security of all companies who handle personal information by not having updates to their software and worse not encrypting our data we are just rolling down the highway of identity theft at 100 mph without brakes or steering. It's probably when not if we have problems.

User avatar
F150HD
Posts: 1439
Joined: Fri Sep 18, 2015 7:49 pm

Re: Equifax customer information leak

Post by F150HD » Tue Sep 26, 2017 4:41 pm

Pajamas wrote:
Tue Sep 26, 2017 2:27 pm
learning_head wrote:
Tue Sep 26, 2017 9:27 am


Won't make a bit of difference. The whole system is broken and setup with wrong incentives, and a forced early retirement of CEO is not going fix it...
Agreed, and his $18 million annual pension isn't making me feel any better about it. With this breach, Pandora's box is open and can't be shut again.
If they truly didn't do anything wrong and were just hit by a really good hacker (whatever that means), why all the retirements? Makes me more suspicious of what occurred. I am guessing (hoping) criminal charges come out of all of this.

learning_head
Posts: 832
Joined: Sat Apr 10, 2010 6:02 pm

Re: Equifax customer information leak

Post by learning_head » Tue Sep 26, 2017 5:02 pm

F150HD wrote:
Tue Sep 26, 2017 4:41 pm
Pajamas wrote:
Tue Sep 26, 2017 2:27 pm
learning_head wrote:
Tue Sep 26, 2017 9:27 am


Won't make a bit of difference. The whole system is broken and setup with wrong incentives, and a forced early retirement of CEO is not going fix it...
Agreed, and his $18 million annual pension isn't making me feel any better about it. With this breach, Pandora's box is open and can't be shut again.
If they truly didn't do anything wrong and were just hit by a really good hacker (whatever that means), why all the retirements? Makes me more suspicious of what occurred. I am guessing (hoping) criminal charges come out of all of this.
The retirements are just to say "see, we made changes at highest levels possible to assure this never happens again". These bad companies are getting a lot of bad press now and are in the spotlight, so they are doing PR damage control. They want overall population to calm down as soon as possible and in general to forget about them again. Noone will change the overall system until there is enough (anger and) demand for it, and that's what they are afraid of.

I doubt very much anyone did anything criminal at Equifax. Their priorities have always been to squeeze the most profits out of consumer data and do just enough (read: spend least money) on
- securing it and
- complying with government laws for consumers to access/manage that data.
That's just how these companies are setup.

Only thing we can do is contact our representatives for the overhaul.

My guess the system won't change, and maybe we'll get some free freeze/thaws out of this in the end, if enough people call. (Note: some states already mandate free ones.)

neilpilot
Posts: 1450
Joined: Fri Dec 04, 2015 1:46 pm
Location: Memphis area

Re: Equifax customer information leak

Post by neilpilot » Tue Sep 26, 2017 5:16 pm

F150HD wrote:
Tue Sep 26, 2017 4:41 pm
Pajamas wrote:
Tue Sep 26, 2017 2:27 pm
learning_head wrote:
Tue Sep 26, 2017 9:27 am


Won't make a bit of difference. The whole system is broken and setup with wrong incentives, and a forced early retirement of CEO is not going fix it...
Agreed, and his $18 million annual pension isn't making me feel any better about it. With this breach, Pandora's box is open and can't be shut again.
If they truly didn't do anything wrong and were just hit by a really good hacker (whatever that means), why all the retirements? Makes me more suspicious of what occurred. I am guessing (hoping) criminal charges come out of all of this.
Wouldn't you consider failure to install the Apache Software security patch that they were sent weeks or months before the hack wrong?

Dead Man Walking
Posts: 588
Joined: Wed Nov 07, 2007 6:51 pm

Re: Equifax customer information leak

Post by Dead Man Walking » Tue Sep 26, 2017 7:23 pm

According to the Chex Systems website, a freeze on my report will prevent thieves from opening checking and savings accounts in my name. I assume that it would prevent me from buying certificates of deposit from banks as well. Would this be the case at banks that I already have certificates of deposit with?

I checked the list of consumer reporting companies provided by the Consumer Financial Protection Bureau. The list is about 30 pages long and applies to nearly every aspect of our financial lives. One has to wonder how many of those companies have been hacked.

DMW
Last edited by Dead Man Walking on Tue Sep 26, 2017 7:55 pm, edited 1 time in total.

Locked