Equifax hackers may use Social Security numbers to impersonate you

Updated September 8, 2017 - 4:29 pm

NEW YORK — There’s no way around it: The news from credit reporting company Equifax that 143 million Americans had their information exposed is extremely serious.

Crucial pieces of personal data that criminals could use to commit identity theft — Social Security numbers, birthdates, address histories, legal names — were all obtained. That’s information that cannot change. And once that data is out there, it’s basically out there forever.

“The crown jewels of personal information were exposed and potentially stolen,” said John Ulzheimer, an independent credit consultant who previously worked at Equifax.

Equifax’s key role in the financial industry makes this breach more alarming than previous ones at Yahoo or retailers. It’s a storehouse of personal information, like how much people owe on their houses and whether they have court judgments against them.

Lenders rely on the information collected by three big credit bureaus — Equifax, TransUnion and Experian — to help them decide whether to approve financing for homes, cars and credit cards. Credit checks are sometimes done by employers when deciding whom to hire for a job.

Atlanta-based Equifax said Thursday that “criminals” exploited a U.S. website application to access the files between mid-May and July of this year. It discovered the hack July 29, but waited until Thursday to warn consumers.

As a consumer, what to do

Beyond the usual steps of checking credit reports regularly and watching for abnormal transactions on your accounts, it may be time to take more extreme measures to lock down your information.

The strongest possible option a person can take immediately is placing what’s known as a credit freeze on their files with the major credit bureaus. That locks down a person’s information, making it impossible to open new accounts and bank cards in their name.

But taking that option also locks you out from opening new accounts. It also can come with a fee with each of the bureaus, depending on which state you live in.

“The credit freeze is the nuclear option of credit protection. But in the wake of a breach this big, it’s worth considering,” said Matt Schulz, an analyst with CreditCards.com.

Consumers will need to be more careful about checking their credit reports. U.S. law gives every American the right to get those files for free once a year from the three major bureaus. While many websites market access to your credit reports, the official one is annualcreditreport.com.

It’s best to spread those requests out over the year — do one every four months, experts say. And expect to check this information not just in the immediate future, but for the long term — potentially years.

“Bad guys can be very patient with data. This should be a wake-up call to be even more diligent with your information,” Schulz said.

Ulzheimer says an option consumers should consider is setting up fraud alerts on your files. That would require creditors to contact you directly, usually by phone, for approval before allowing an account to be opened. That gives people a more active role, rather passively monitoring or freezing your entire file. Bureaus also must contact each other when a fraud alert is placed.

Need an even more extreme step? People can request to change their Social Security number with the Social Security Administration if they have repeatedly been a victim of identity fraud under their original number.

Equifax has a website, https://www.equifaxsecurity2017.com/, where people can check if their information may have been stolen. Consumers can also call 866-447-7559 for information. The company also says it will send mail to all who had personally identifiable information stolen.

Size and scope

This isn’t the biggest data breach in history. That indignity still belongs to Yahoo, which was targeted in at least two separate digital burglaries that affected more than 1 billion of its users’ accounts throughout the world. But no Social Security numbers or drivers’ license information were disclosed in the Yahoo break-in.

Equifax’s security lapse could be the largest theft involving Social Security numbers, one of the most common methods used to confirm a person’s identity in the U.S. It eclipses a 2015 hack at health insurer Anthem Inc. that involved the Social Security numbers of about 80 million people.

Any data breach threatens to tarnish a company’s reputation, but it is especially mortifying for Equifax, whose entire business revolves around being a secure storehouse and providing a clear financial profile of consumers that lenders and other businesses can trust.

And a security expert said the website created Equifax to help customers find out if their information was stolen raises its own security questions. The site looks like the kind set up by attackers to trick people into disclosing information, says Georgia Weidman, founder and chief technology officer for security firm Shevirah.

“It’s teaching people entirely the wrong things about using the internet securely,” Weidman said. She said says she’s also troubled by Equifax’s approach to security generally, including reports that it didn’t respond to basic scripting bugs it was warned about last year.

In addition to the personal information, Equifax said the credit card numbers for about 209,000 U.S. consumers were also taken, as were “certain dispute documents” containing personal information for approximately 182,000 people in the U.S.

The company said hackers may have some “limited personal information” about British and Canadian residents, but doesn’t believe that consumers from other countries were affected.

Fallout

The enormity of the breach has put immense financial and political pressure on Equifax.

Washington regulators and politicians swiftly criticized Equifax, and Jeb Hensarling, chairman of the House Financial Services Committee, said he will call for congressional hearings.

Equifax’s requirement that affected customers sign up for arbitration also drew a backlash. Democrats in the House and Senate called on the company to pull back its requirement that anyone who signs up for credit monitoring give up their right to sue Equifax in a class-action lawsuit.

The Consumer Financial Protection Bureau, the nation’s chief watchdog for financial services, called the breach “troubling” and said Equifax should drop the arbitration requirement. The CFPB recently passed a rule requiring financial companies to let customers sue together when a large group has been wronged.

Several state attorneys general also stepped in. New York’s attorney general, Eric Schneiderman, said he was starting his own investigation.

Company executives are also under scrutiny, after it was found that three Equifax executives sold shares worth a combined $1.8 million just a few days after the company discovered the breach, according to documents filed with securities regulators. Equifax said the three executives “had no knowledge that an intrusion had occurred at the time they sold their shares.”

Equifax shares fell about 13 percent to $123.75 in heavy trading. The decline equates to about $2.28 billion in lost market value.

ad-high_impact_4
Business
MGM Grand Plans To Add Retail And Dining To Its Strip Facade
MGM Grand President and Chief Operating Officer Scott Sibella said executives are “discussing redeveloping that entire frontage of the building out to the Las Vegas Strip.” (Todd Prince/Las Vegas Review-Journal)
Boyd Gaming planning new corporate campus
Casino operator Boyd Gaming Corp. has filed plans to build a new corporate campus. The plans call for two 10-story office buildings and a six-level parking garage in the southwest Las Vegas Valley. Boyd Gaming operates The Orleans, the Suncoast, downtown's California Hotel and other properties. The new headquarters would be just a mile from its current main office building.
Bellagio Conservatory transformed to celebrate Year of the Pig
The Bellagio Conservatory Team transformed the 14,000 square foot conservatory to commemorate Chinese New Year, the holiday that marks the end of the coldest days of winter. (Rachel Aston/Las Vegas Review-Journal)
CES 2019: Intro uses sound to connect people
Intro, a startup that is part of the Future Worlds Accelerator in the UK, has an app that uses ultrasonic sound to find people and companies nearby.
CES 2019 Video: CES wraps up another year
Time-lapse video of the action at CES 2019 in Las Vegas. (Mat Luschek/Las Vegas Review-Journal)
CES 2019: Create your own beauty products
Beauty Mix by BeautyByMe is a product that lets you create your own cosmetics and beauty products. (Mat Luschek/Las Vegas Review-Journal)
CES 2019: Picobrew’s home brew machine
Picobrew brings automation to homebrewing. (Mat Luschek/Las Vegas Review-Journal)
CES 2019: Surviving CES
What it's like to spend four days working the mammoth tech convention. (Jason Bracelin/Las Vegas Review-Journal)
Haier’s smart home
Haier presented smart home technology at CES 2019.
CES 2019 VIDEO: Foldimate makes laundry day easy
Foldimate has created a machine that will fold your laundry for you. Just feed it anything you need folded and it will do the rest. (Mat Luschek/Las Vegas Review-Journal)
CES 2019: Opte device corrects skin spots
Opte from Proctor and Gamble is a device for correcting spots and freckles from skin. It analyzes the area for spots and then covers them with a serum of matching skin tone. (Mat Luschek/Las Vegas Review-Journal)
Circa hotel-casino in downtown Las Vegas unveiled
Derek Stevens reveals Circa hotel-casino in downtown Las Vegas. He plans open by the end of 2020. (K.M Cannon/Las Vegas Review-Journal)
Circa, new casino coming to Fremont Street
Casino owner Derek Stevens announces his new property Circa, coming to Fremont Street in downtown Las Vegas in late 2020. (Michael Quine/Las Vegas Review-Journal)
Dreenk My Oeno makes wine suggestions
At CES 2019 in Las Vegas, the Dreenk My Oeno tells you all about wine.
Polaroid One Step Plus camera unveiled at CES 2019
Polaroid has moved into the digital age with its One Step Plus camera with Bluetooth. With the connected app, it turns your smartphone into a remote for the camera, along with filters and features.
Amazon is everywhere at CES 2019 in Las Vegas
Seemingly everything works with Amazon Alexa
LG Smart Mirror helps you dress snazzy
LG’s Smart Mirror is less of a mirror but more of an assistant to help get you looking snazzy. It takes your image and recommends clothes for you or matches existing clothes with new clothes, which can be purchased right from the mirror. (Mat Luschek/Las Vegas Review-Journal)
Underwater robots make waves at CES 2019 in Las Vegas
Robosea is a company dedicated to underwater robotics. They produce consumer robots for underwater filming as well as commercial products which can be used for underwater research. (Mat Luschek/Las Vegas Review-Journal)
CES 2019 - Victrola record players spin in Las Vegas
A new spin on an old favorite, Victrola record players are meeting a demand for retro products. The brand is also making furnitures with built-in speakers.
CES 2019: Slamtec robots ready to serve
Slamtec is a robotics company out of China whose goal is to provide solutions for laser localization mapping and navigation. They have created two autonomous robots that can be used in areas such as bars, restaurants and malls. (Mat Luschek/Las Vegas Review-Journal)
Mixologiq drink maker appears at CES 2019 in Las Vegas.
This is the Mixologiq drink maker.
CES 2019: Veritable smart garden
Let’s face it; not all of us have green thumbs. And herbs are particularly difficult to grow, considering their constant need for sunshine. Enter the Veritable smart garden from Exky, which does it all for you. (Heidi Knapp Rinella/Las Vegas Review-Journal)
Bonnie Springs Ranch near Las Vegas being sold to developer
Bonnie Springs Ranch near Las Vegas is being sold to a developer, set to close in March. Bonnie Springs, west of Las Vegas off State Route 159 — next to Spring Mountain Ranch State Park — spans more than 60 acres and was on the market for $31 million. The developer and his project partner are under contract to buy the ranch and plan to chop it up mostly into custom-home lots. The plans includes a 25-room motel, a restaurant and a 5,400-square-foot event barn.
Bone-conduction headphones form Aftershokz
Aftershokz offers bone-conduction headphones - headphones that don’t go in the ear.
CES Happy Hour party at Hangover Suite at Caesars Palace
Conventioneers mingled during the Hardware Massive CES 2019 Happy Hour Bash at The Hangover Suite at Caesars Palace in Las Vegas. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Autonomous Cars and Futuristic Aircraft Rule CES
Day two of CES was dominated by autonomous cars and futuristic aircraft in the North Hall of the Las Vegas Convention Center.
TekNekSavr fights neck problems caused by smart phones
Atiya Syverson invented the TekNekSavr to help fight neck and head problems caused by strains while typing on smart phones. (Mat Luschek/Las Vegas Review-Journal)
New eyeglasses know if you fall and call for help
The French company Abeye has created eye glasses that will detect if the wearer falls and call for help. (Mat Luschek/Las Vegas Review-Journal)
Company that creates vibrator-like device claims genders bias against CES
Lora DiCarlo is a women-run start-up that creates a vibrator-like device designed for female pleasure called the Osé. This year they were awarded the CES Innovation Award in the Robotics and Drone Category, but a month later the Consumer Technology Association, which runs CES, rescinded the award and their booth. Haddock and her team believe it is a reflection of gender bias and sexism in an industry with a long history of male domination.
CES-Wagz has new pet products
Wagz has three new products to help create better lives for your pets in a digital world. One is a collar with LTE tracking and an HD camera. Also a smart pet door that only lets your pet in and out. Lastly, a device to humanely keep Fluffy out of certain areas of your home. (Mat Luschek/Las Vegas Review-Journal)
TOP NEWS
News Headlines
ad-infeed_1
ads_infeed_2
Local Spotlight
Home Front Page Footer Listing
Circular
You May Like

You May Like