Personal computing discussed

Moderators: Captain Ned, emkubed

 
DragonDaddyBear
Gerbil Elite
Topic Author
Posts: 604
Joined: Fri Jan 30, 2009 8:01 am

Darn it, Equifax!

Thu Sep 07, 2017 7:38 pm

https://www.equifaxsecurity2017.com/
Over 140 million people. SSN's and more were compromised.
 
whm1974
Maximum Gerbil
Posts: 4806
Joined: Fri Dec 05, 2014 5:29 am

Re: Darn it, Equifax!

Thu Sep 07, 2017 8:10 pm

I guess I'm going to have to watch my credit score more closely now. I think the last time I checked it was like over ten years ago.
 
DrCR
Gerbil Team Leader
Posts: 228
Joined: Tue May 10, 2005 7:18 am

Re: Darn it, Equifax!

Thu Sep 07, 2017 8:13 pm

Whose SSNs would they have? Basically anyone with charge/credit cards? Or perhaps something like only those who signed up with then to receive credit score info (or perhaps whose charge/credit card company complimentary provides a credit score through them)?
 
DragonDaddyBear
Gerbil Elite
Topic Author
Posts: 604
Joined: Fri Jan 30, 2009 8:01 am

Re: Darn it, Equifax!

Thu Sep 07, 2017 9:29 pm

They ate one of the "big 3." They have just about every bit of personal information about you: Address history, payment history, account information, ssn, etc. This is really bad. I think this is a strong candidate for the worst breach to date. I have yet to see a report about how the information was beached. I hope they share that to avoid another potential breach, but that's unlikely. Is possible the latest Struts vulnerability has studying to do with this. That could be bad news for other sites.
 
DragonDaddyBear
Gerbil Elite
Topic Author
Posts: 604
Joined: Fri Jan 30, 2009 8:01 am

Re: Darn it, Equifax!

Thu Sep 07, 2017 9:35 pm

Brian Krebs has a great write up. I'm not planning on getting a loan so i may take his advice. https://krebsonsecurity.com/2017/09/bre ... americans/
 
just brew it!
Gold subscriber
Administrator
Posts: 48787
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Darn it, Equifax!

Thu Sep 07, 2017 10:57 pm

F*ck. I was affected by the OPM breach. Now this. Goddammit, this is getting ridiculous.
Nostalgia isn't what it used to be.
 
ludi
Darth Gerbil
Posts: 7190
Joined: Fri Jun 21, 2002 10:47 pm
Location: Sunny Colorado front range

Re: Darn it, Equifax!

Thu Sep 07, 2017 11:24 pm

DragonDaddyBear wrote:
DrCR wrote:
Whose SSNs would they have? Basically anyone with charge/credit cards? Or perhaps something like only those who signed up with then to receive credit score info (or perhaps whose charge/credit card company complimentary provides a credit score through them)?

They are one of the "big 3." They have just about every bit of personal information about you: Address history, payment history, account information, ssn, etc. This is really bad. I think this is a strong candidate for the worst breach to date. I have yet to see a report about how the information was beached. I hope they share that to avoid another potential breach, but that's unlikely. Is possible the latest Struts vulnerability has studying to do with this. That could be bad news for other sites.

Specifically, the "big three" are EquiFax, TransUnion, and Experian. If you ever applied for any product or service requiring recurring payments -- land line, cell phone, cable TV or Internet service, retail credit card, mainstream credit card, car dealership loan, mortgage, HELOC, any other type of bank or credit union loan, ad infinitum -- it almost certainly bounced through one or more of those three agencies to verify your creditworthiness. They know almost as much about you as the NSA after the waterboarding of Santa Claus.
Abacus Model 2.5 | Quad-Row FX with 256 Cherry Red Slider Beads | Applewood Frame | Water Cooling by Brita Filtration
 
ozzuneoj
Gerbil XP
Posts: 495
Joined: Tue Jan 21, 2014 1:27 pm

Re: Darn it, Equifax!

Fri Sep 08, 2017 12:02 am

Whew... it says they don't believe I was impacted.
Desktop - i5 2500K@4.5Ghz - MSI P67A-G43 - 16GB DDR3-2133 - PNY GTX 970 - Samsung SM841 128GB
Laptop - Asus Q500A - Core i5 3210M - 8GB DDR3-1600 - 840 EVO 256GB - AUO 1080P
HTPC - i7 4790 - Asus B85 - 8GB DDR3-1600 - 64GB Crucial C300 - EVGA GTX 1050 Ti
 
mmp121
Gerbil
Posts: 25
Joined: Tue Aug 15, 2006 12:09 am

Re: Darn it, Equifax!

Fri Sep 08, 2017 12:47 am

just brew it! wrote:
F*ck. I was affected by the OPM breach. Now this. Goddammit, this is getting ridiculous.


You and me both! Damn OPM breach, and now this one. They think my data may have been compromised! :evil:
 
Kougar
Silver subscriber
Gerbil Jedi
Posts: 1923
Joined: Tue Dec 02, 2008 2:12 am
Location: Texas

Re: Darn it, Equifax!

Fri Sep 08, 2017 2:19 am

Looks like I am also compromised. Any other company would have to pay a pretty penny to open 143 million credit monitoring accounts, but given that's one of their own services to begin with they can write most of that cost off.

I'm a little surprised it hasn't happened sooner given these big three credit bureaus are the ultimate treasure troves of personal data, but at the same time I hope Equifax is held accountable for this. They have considerable personal data on people and there's nothing to really do about it.
 
Klopsik206
Gerbil First Class
Posts: 176
Joined: Mon Apr 21, 2003 1:28 am
Location: old continent

Re: Darn it, Equifax!

Fri Sep 08, 2017 2:42 am

God bless EU for GDPR.
Once GDPR regulation enters EU's legal system in 2018 such breach would result with monstrous fines (up to 4% of global revenue).
 
biffzinker
Gerbil Jedi
Posts: 1926
Joined: Tue Mar 21, 2006 3:53 pm
Location: Anchorage, Alaska

Re: Darn it, Equifax!

Fri Sep 08, 2017 3:30 am

Dam, I was compromised.
Based on the information provided, we believe that your personal information may have been impacted by this incident.
It would take you... 2233 continuous hours or 93 days, 1 hour, and 20 minutes of gameplay to complete your Steam library.
In this time you could... Speed run Super Mario Bros (NES) 26,800 times.
 
Krogoth
Silver subscriber
Gerbil Elder
Posts: 5327
Joined: Tue Apr 15, 2003 3:20 pm
Location: somewhere on Core Prime
Contact:

Re: Darn it, Equifax!

Fri Sep 08, 2017 5:34 am

Internet has never been a secured network or environment. It has always been that way by design. It is just a matter of time and motivation for certain parties to find an exploit against lucrative targets.

Better get used to these "leaks" until people start to realize that transmitting sensitive information on the internet isn't so hot and carries significant risks.
Ivy Bridge i5-3570K@4.0Ghz, Gigabyte Z77X-UD3H, 2x4GiB of PC3-12800, Sapphire RX Vega 64, Corsair CX-600 and Fractal Refined R4 (W). Kentsfield Q6600@3Ghz, HD 4850 2x2GiB PC2-6400, Gigabyte EP45-DS4P, OCZ Modstream 700W, and PC-7B.
 
derFunkenstein
Gold subscriber
Gerbil God
Posts: 23566
Joined: Fri Feb 21, 2003 9:13 pm
Location: Comin' to you directly from the Mothership

Re: Darn it, Equifax!

Fri Sep 08, 2017 6:33 am

I was also apparently compromised. I'm guessing the only people that weren't are people with no credit.
"And and if you start to bleed, stop wiping." -whm1974
 
Aranarth
Gerbil Elite
Posts: 963
Joined: Tue Jan 17, 2006 6:56 am
Location: Big Rapids, Mich. (Est Time Zone)
Contact:

Re: Darn it, Equifax!

Fri Sep 08, 2017 7:47 am

I guess as a general security measure everyone should request a security freeze from all three credit reporters.

I suppose I should also put a "im not interested in credit card offers" notice on there as well to cut down on the spam mail and phone calls.
I wish to see things not as they are but as they should be.

Main machine: Core I7 -2600K @ 4.5Ghz / 16 gig ram / Radeon 7870 / 240 gb Corsair ssd / 5tb hd
Old machine: Core 2 quad Q6600 @ 3ghz / 8 gig ram / Radeon 6870 / 240 gb PNY ssd / 1tb HD
 
Hawkwing74
Silver subscriber
His Holy Gerbilness
Posts: 13671
Joined: Wed Aug 20, 2003 5:51 pm
Location: Streamwood, IL

Re: Darn it, Equifax!

Fri Sep 08, 2017 8:18 am

Ugh, I need to look into the credit freeze also. What a pain.

They say I am affected by the breach as well. All I can think of is I wanted to switch cell phone service. No house or car loan or new credit card coming up. I guess I probably need to complete the switch before putting a freeze.
 
Glorious
Gold subscriber
Grand Admiral Gerbil
Posts: 10033
Joined: Tue Aug 27, 2002 6:35 pm

Re: Darn it, Equifax!

Fri Sep 08, 2017 8:31 am

Krogoth wrote:
Internet has never been a secured network or environment. It has always been that way by design. It is just a matter of time and motivation for certain parties to find an exploit against lucrative targets.

Better get used to these "leaks" until people start to realize that transmitting sensitive information on the internet isn't so hot and carries significant risks.


The original transmission of the data is almost certainly, to a virtual absolute, not the source of the breach.

It may not even directly involve the internet at all, as all they say is "unauthorized access" which could simply be a an employee/contractor taking or peeking at data they weren't supposed to be able to look at.
 
G8torbyte
Gold subscriber
Gerbil
Posts: 65
Joined: Thu Mar 09, 2017 2:09 pm
Location: NJ, near Philly
Contact:

Re: Darn it, Equifax!

Fri Sep 08, 2017 8:53 am

Also if you want to opt-out of pre-screening for lines of credit and insurance can be done here: toll-free 1-888-5-OPT-OUT (1-888-567-8688) or visit http://www.optoutprescreen.com. The three main reporting agencies plus Innovis will place a 5-year halt and you can mail back the form after signing for a permanent opt-out. Just did it and took only a couple minutes. As Krebs mentioned it'll discontinue mailings of offers to you.
Later, -G8tor
Building PCs and gaming since "Chuck Yeager's Air Combat" 1991
Current system setup: X99 Command/Control Station
 
Hawkwing74
Silver subscriber
His Holy Gerbilness
Posts: 13671
Joined: Wed Aug 20, 2003 5:51 pm
Location: Streamwood, IL

Re: Darn it, Equifax!

Fri Sep 08, 2017 9:08 am

G8torbyte wrote:
Also if you want to opt-out of pre-screening for lines of credit and insurance can be done here: toll-free 1-888-5-OPT-OUT (1-888-567-8688) or visit http://www.optoutprescreen.com. The three main reporting agencies plus Innovis will place a 5-year halt and you can mail back the form after signing for a permanent opt-out. Just did it and took only a couple minutes. As Krebs mentioned it'll discontinue mailings of offers to you.

Thanks, very helpful!

I'm still going to look at credit freeze.
 
ozzuneoj
Gerbil XP
Posts: 495
Joined: Tue Jan 21, 2014 1:27 pm

Re: Darn it, Equifax!

Fri Sep 08, 2017 1:45 pm

derFunkenstein wrote:
I was also apparently compromised. I'm guessing the only people that weren't are people with no credit.

I have credit (760), but zero debt. I was not compromised apparently.
Desktop - i5 2500K@4.5Ghz - MSI P67A-G43 - 16GB DDR3-2133 - PNY GTX 970 - Samsung SM841 128GB
Laptop - Asus Q500A - Core i5 3210M - 8GB DDR3-1600 - 840 EVO 256GB - AUO 1080P
HTPC - i7 4790 - Asus B85 - 8GB DDR3-1600 - 64GB Crucial C300 - EVGA GTX 1050 Ti
 
bfg-9000
Gerbil First Class
Posts: 184
Joined: Tue Mar 01, 2016 9:17 pm

Re: Darn it, Equifax!

Fri Sep 08, 2017 2:47 pm

Just a note for anyone using that site to check if they were affected by the breach--you have agreed to restrict your legal rights and not sue them in the TOS:
AGREEMENT TO RESOLVE ALL DISPUTES BY BINDING INDIVIDUAL ARBITRATION. PLEASE READ THIS ENTIRE SECTION CAREFULLY BECAUSE IT AFFECTS YOUR LEGAL RIGHTS BY REQUIRING ARBITRATION OF DISPUTES (EXCEPT AS SET FORTH BELOW) AND A WAIVER OF THE ABILITY TO BRING OR PARTICIPATE IN A CLASS ACTION, CLASS ARBITRATION, OR OTHER REPRESENTATIVE ACTION. ARBITRATION PROVIDES A QUICK AND COST EFFECTIVE MECHANISM FOR RESOLVING DISPUTES, BUT YOU SHOULD BE AWARE THAT IT ALSO LIMITS YOUR RIGHTS TO DISCOVERY AND APPEAL.

Just this morning due to the public outrage, Equifax provided an opt-out provision to exclude yourself from arbitration like so:
In order to exclude Yourself from the arbitration provision, You must notify Equifax in writing within 30 days of the date that You first accept this Agreement on the Site (for Products purchased from Equifax on the Site). ...must include Your name, address, and Equifax User ID, as well as a clear statement that You do not wish to resolve disputes with Equifax through arbitration.
 
general_tux
Gerbil
Posts: 78
Joined: Thu Aug 04, 2016 6:41 pm
Location: Middle of nowhere, MT, USA

Re: Darn it, Equifax!

Fri Sep 08, 2017 2:56 pm

Here is a little bit of good news. According to Ars Technica:
While New York Attorney General Eric Schneiderman said the forced arbitration terms of service are "unenforceable" and should be removed, Equifax has added language to its "FAQs for Consumers" that the arbitration clause in the "Terms of Use" does not apply to "the cybersecurity incident."
Main: Intel i7-5775C w/ Noctua NH-D14, single fan | Gigabyte Z97X-Gaming 7 | EVGA GTX 1070 FTW | GSkill DDR3-1866, 32GB | Corsair Pro 750W Gold
HTPC: AMD A10-7850K | ASRock FM2A88X-ITX+ | GSkill DDR3-2400, 8GB | Silverstone SFX 450W
 
bfg-9000
Gerbil First Class
Posts: 184
Joined: Tue Mar 01, 2016 9:17 pm

Re: Darn it, Equifax!

Fri Sep 08, 2017 3:26 pm

Unenforceable just means you can sue for the right to sue or at least have to convince a judge you should be able to sue, so it's better and easier to opt out now if you decide to use the free credit monitoring service.

The Consumer Financial Protection Bureau thought arbitration clauses in general are bad for consumers and ruled to ban them beginning with contracts made after March 19, 2018. But the House has already moved to repeal this so now it's up to the Senate and Trump to decide whether to kill it. In either case it's not going to be retroactive.
 
derFunkenstein
Gold subscriber
Gerbil God
Posts: 23566
Joined: Fri Feb 21, 2003 9:13 pm
Location: Comin' to you directly from the Mothership

Re: Darn it, Equifax!

Fri Sep 08, 2017 3:32 pm

Tangential: some Equifax execs sold stock after the breach but before informing the public: http://www.marketwatch.com/story/equifa ... 2017-09-07

They claim to have had "no knowledge" but please...
"And and if you start to bleed, stop wiping." -whm1974
 
Usacomp2k3
Gerbil God
Posts: 21546
Joined: Thu Apr 01, 2004 4:53 pm
Location: Orlando, FL
Contact:

Re: Darn it, Equifax!

Fri Sep 08, 2017 4:10 pm

Neither my wife or I are effected. Yay for saying no to debt/credit except for the mortgage.
 
Mr Bill
Gold subscriber
Graphmaster Gerbil
Posts: 1396
Joined: Mon Jan 21, 2002 7:00 pm
Location: Colorado Western Slope
Contact:

Re: Darn it, Equifax!

Fri Sep 08, 2017 6:34 pm

DragonDaddyBear wrote:
https://www.equifaxsecurity2017.com/
Over 140 million people. SSN's and more were compromised.
The website is not responding.
X6 1100T BE | Gigabyte GA-990FXA-UD3 AM3+ | XFX HD 7870 | 16 GB DDR3 | Samsung 830/850 Pro SSD's | Logitech cherry MX-brown G710+ | Logitech G303 Daedalus Apex mouse | SeaSonic SS-660XP 80+ Pt | BenQ 24' 1900x1200 IPS | APC Back-UPS NS-1350 | WinXP64 Pro
 
NovusBogus
Silver subscriber
Graphmaster Gerbil
Posts: 1168
Joined: Sun Jan 06, 2013 12:37 am

Re: Darn it, Equifax!

Fri Sep 08, 2017 7:30 pm

Krogoth wrote:
Internet has never been a secured network or environment. It has always been that way by design. It is just a matter of time and motivation for certain parties to find an exploit against lucrative targets.

Better get used to these "leaks" until people start to realize that transmitting sensitive information on the internet isn't so hot and carries significant risks.

Would it be fair to say that Krogoth is not impressed by Internet security? :)

In any case, I agree--funneling everything into a single giant all-seeing data gulag may be convenient for large corporations and the glorious dotcom master race but it's not going to end well.

As for the breach, I checked the site and got the "deferred" message saying to try again next week. I'm assuming that means that I'm not in the known compromised database(s) but I am in one or more that they're not sure about.
 
DragonDaddyBear
Gerbil Elite
Topic Author
Posts: 604
Joined: Fri Jan 30, 2009 8:01 am

Re: Darn it, Equifax!

Fri Sep 08, 2017 10:04 pm

https://arstechnica.com/tech-policy/201 ... -find-out/

Wow. Even if it's not legally enforceable you have to sue just to get the right to sue for the massive fail affecting your life (assuming nothing changes). Not cool. I'm just going to freeze my credit and, if affected later, maybe sue. I've heard that small claims against larger companies are some what successful. I hope i never need to try.

Seriously, some C level probably deserves jail time buy that will never happen. Especially since they took so long to disclose and sold a took of stock, though allegedly they didn't know... uh huh
 
Hawkwing74
Silver subscriber
His Holy Gerbilness
Posts: 13671
Joined: Wed Aug 20, 2003 5:51 pm
Location: Streamwood, IL

Re: Darn it, Equifax!

Mon Sep 11, 2017 8:24 am

I put a credit freeze on Equifax, Transunion and Experian this weekend. Equifax did not charge me but the others did. I guess since I was a victim of their error, it was free for Equifax.

My wife was not affected so we have that at least.
 
cheesyking
Minister of Gerbil Affairs
Posts: 2653
Joined: Sun Jan 25, 2004 7:52 am
Location: That London (or so I'm told)
Contact:

Re: Darn it, Equifax!

Mon Sep 11, 2017 8:41 am

Mr Bill wrote:
DragonDaddyBear wrote:
https://www.equifaxsecurity2017.com/
Over 140 million people. SSN's and more were compromised.
The website is not responding.

Sounds like that website was full of crap anyway:
https://krebsonsecurity.com/2017/09/equifax-breach-response-turns-dumpster-fire/
Fernando!
Your mother ate my dog!

Who is online

Users browsing this forum: Bing [Bot], Yahoo [Bot] and 1 guest