Equifax announced today that 143 million US-based users had their personal information compromised this year. Attackers reportedly exploited a vulnerability on Equifax's website to steal names, Social Security numbers, birthdates, addresses, and, in some cases, driver’s license numbers. Credit card numbers for approximately 209,000 people and certain dispute documents with personal identifying information for approximately 182,000 people were also accessed. Although Equifax operates in other countries, it didn't detect any stolen personal information abroad.
The company says it discovered the breach on July 29th this year, and has since plugged the security hole. The company also set up a dedicated website — www.equifaxsecurity2017.com — for possible victims to sign up for credit file monitoring and identity theft protection.
Data breaches are fairly common, although those impacting Social Security and driver's license numbers are rarer and more serious. The fact that Social Security numbers are included in the breach makes it likely that victims will be targeted for identity theft. Equifax says it's working with both an independent cybersecurity firm and law enforcement to investigate.
bbyf16 on September 7th, 2017 at 22:35 UTC »
the more I think about this, the more pissed off I'm getting.
Equifax takes my info without my permission as such, then charges me if I want to take a peek at it (credit report), then loses the info, and the best they can do is tell me 2 months after they found out and after their execs sold stock before it tanked?
we should be able to sue them out of existence or have lifetime identity protection. what kind of bs is this?
hopeishigh on September 7th, 2017 at 21:46 UTC »
A year of credit monitoring? I don't even understand. The likely hood is that every single person reading this was impacted yet some how after a year it's alright. My social security number never changes, not even after a year.
flunky_the_majestic on September 7th, 2017 at 21:43 UTC »
Guys, it's starting to seem like it's a bad idea to rely on a 9 digit number, kept strictly secret, yet shared with dozens of organizations, in order to authenticate a person to receive credit, interact with the government, access banking, and gain employment.
Edit: counting digits