Fail: Equifax Directs Consumers To Fake Site On Twitter

[Guest]

Equifax mistakenly sent people looking for more information about its recent data breach, which compromised the private data of 143 million Americans, to a mock website that could have stolen the last six digits of their Social Security numbers.

Fail: Equifax Directs Consumers To Fake Site On Twitter : Read more

 

[why_wolf]

I strongly recommend to anyone that isn't presently trying to open new credit card or bank loan to place a credit freeze on their account. In theory the credit freeze will stop criminals from being able to open bogus credit cards and loans in your name. You can read up in detail about what it is and how to do it over on KrebsonSecurity. http://krebsonsecurity.com/2015/06/how-i-learned-to-stop-worrying-and-embrace-the-security-freeze/

Krebs is a great site for news on internet security in general. His work is often sited by the big newspapers in their reports.

 

[derekullo]

If I can protect my World of Warcraft account from getting stolen using 2 factor authentication you would think it would be standard practice for credit agencies who are entrusted with the most important data you have.

By simply requiring a code generated every 30 seconds in google authenticator to access or create new credit cards, loans and other financial products, the majority of credit card fraud and identity theft could be erradicated.

Of course your phone could still be stolen, but that would require a thief to be in physical possession of your phone, not 2000 miles away trying to guess your mother's maiden name.

You could always institute a credit freeze as mentioned in a prior post if your phone was stolen.

Credit agencies would probably lose money due to people dropping their credit card monitoring services, but this is a small price to pay for not screwing up some one's life.

 

[fruitn]

Try looking to Denmark and the NemID. A papercard in your pocket with keys to your username and password linked to your social security number. What a shame ppl wants to get rid of the card part, it's the only thing keeping them secure.

 

[hixbot]

Class action lawsuit folks. It's one thing for hackers to steal the database, but it should have had strong encryption that would take the thieves thousands of years to see the contents of the database. Instead Equifax, who are entrusted to the most sensitive information of millions of people, not only let hackers steal the database, but didn't encrypt it! Class action lawsuit!