{"id":134808,"date":"2017-09-21T08:24:13","date_gmt":"2017-09-21T14:24:13","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/?p=134808"},"modified":"2017-09-21T18:18:44","modified_gmt":"2017-09-22T00:18:44","slug":"equifax-breach-round","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2017\/09\/21\/equifax-breach-round.html","title":{"rendered":"My Equifax Breach Round-Up"},"content":{"rendered":"<p>The news cycle on all of this has settled down finally, so I feel like I can determine some coherent recommendations of what to do. That&#8217;s different from what we need to do nationally (stop treating the SSN as a secret password <i>and<\/i> unique identifier, for one), but that&#8217;s a different kettle of fish.<\/p>\n<p>In sum, given that 140-odd million American consumers (and some Brits and Canadians) have had their personal identification information stolen (name, address, birth date, Social Security Number, some Drivers Licenses, etc.), and companies are <i>still<\/i> treating those values as a way to identify who you are, you need to take steps to protect yourself.<\/p>\n<p>1. Put a lock \/ freeze on your credit record at each of the major credit organizations. That will prevent new credit accounts and loans from being opened up in your name. It will also keep you from opening up new accounts, so take care of that first, and safely secure the PIN you get back from them.<\/p>\n<p>This costs money (not a lot, but still &#8230;) each time you put it on or left it off.<\/p>\n<p>Note that it takes a few days to lift a hold\/freeze, so if you are going in for a car loan or home loan or something, you&#8217;ll need to lift it in advance (find out from the loaning company which agency they use).<\/p>\n<p>2. Consensus seems to be to ignore the &#8220;credit monitoring&#8221; service that Equifax is offering (for now) for free, and that the other companies will charge for.<\/p>\n<p>3. Keep an eye on your bills and statements for the next &#8230; well, forever. Remember, the info that was stolen isn&#8217;t going stale, and can be used against you this year, next year, or for decades to come (until the costs to banks and these credit agencies gets so high that someone comes up with another way to validate identity).<\/p>\n<p>4. Periodically monitor your credit report to see if something is wonky there. Again, this is now a life-long responsibility. You can usually get a free copy once a year, so you can spread that out between the different firms and check it quarterly.<\/p>\n<p>5. Because in theory someone with your name and SSN could file federal taxes for you and claim a big refund that they coincidentally forward to a new address, it&#8217;s recommended that you file your taxes quarterly or as soon as possible each year. Again, this is now a <i>perpetual<\/i> threat.<\/p>\n<p>Here&#8217;s some run reading.<\/p>\n<ul>\n<li><a href=\"https:\/\/krebsonsecurity.com\/2017\/09\/the-equifax-breach-what-you-should-know\/\">Best summary articles<\/a> <a href=\"https:\/\/medium.freecodecamp.org\/the-equifax-hack-and-how-to-protect-your-family-all-explained-in-5-minutes-a2b5187cb6c0\">I found on the breach<\/a>, with advice.<\/li>\n<li>The CIO and CSO of Equifax have <a href=\"https:\/\/arstechnica.com\/tech-policy\/2017\/09\/equifax-cio-cso-retire-in-wake-of-huge-security-breach\/\">&#8220;retired&#8221; immediately<\/a>.<\/li>\n<li>Watch out for <a href=\"https:\/\/consumerist.com\/2017\/09\/12\/4-things-to-remember-to-not-get-scammed-in-wake-of-equifax-breach\/\">being scammed<\/a> <a href=\"https:\/\/consumerist.com\/2017\/09\/20\/dont-be-fooled-by-fake-equifax-data-breach-information-sites\/\">after the breach.<\/a><\/li>\n<li>How to put in a <a href=\"http:\/\/consumersunion.org\/research\/consumers-unions-guide-to-security-freeze-protection-2\/\">credit record \/ security freeze<\/a>.<\/li>\n<li>Reiterating the advice to <a href=\"https:\/\/consumerist.com\/2017\/09\/11\/dont-take-equifax-up-on-its-credit-monitoring-offer\/\">not bother with credit monitoring<\/a>.<\/li>\n<li><a href=\"https:\/\/consumerist.com\/2017\/09\/15\/states-call-on-equifax-to-halt-marketing-of-its-paid-credit-monitoring-service\/\">States are urging Equifax to stop marketing the credit monitoring product<\/a> (TrustedID) they are offering to customers for free (for a year). (Also recommends against taking the Equifax TrustedID program.)<\/li>\n<li>Bills have been introduced in Congress to <a href=\"https:\/\/consumerist.com\/2017\/09\/15\/sen-elizabeth-warren-introduces-bill-that-would-make-credit-freezes-free\/\">make credit record freezes free<\/a>.<\/li>\n<li>Oh, in passing, yet <a href=\"https:\/\/krebsonsecurity.com\/2017\/09\/ayuda-help-equifax-has-my-data\/\">two<\/a> <a href=\"http:\/\/thehill.com\/policy\/cybersecurity\/351555-equifax-tweets-out-would-be-fishing-site-in-lieu-of-breach-info-site\">more<\/a> insanely bad Equifax security problem.<\/li>\n<\/ul>\n<div style=\"text-align: center;\"><a href=\"https:\/\/plus.google.com\/photos\/101083456815352083930\/albums\/6468237298470132017\/6468237296567920194?authkey=CKeBgPyF28GNKQ\"><img decoding=\"async\" style=\"max-width: 650px;\" src=\"https:\/\/lh3.googleusercontent.com\/-Yl0DbalQZ78\/WcPLjRDdJkI\/AAAAAAAEhfw\/d1izEDJAq9w0UQd5aqZjouPUyG0hoIjegCL0BGAs\/Equifax%2BHQ.jpg?imgmax=660\" \/><\/a><\/div>\n<div style=\"text-align: center;\"><\/div>\n<p><span style=\"font-size: small;\"><a href=\"https:\/\/plus.google.com\/+DaveHill47\/posts\/bcDaj1wedfi\">View on Google+<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The news cycle on all of this has settled down finally, so I feel like I can determine some coherent recommendations of what to do. That&#8217;s different from what we need to do nationally (stop treating the SSN as a secret password and unique identifier, for one), but that&#8217;s a different kettle of fish. In &hellip; <a href=\"https:\/\/hill-kleerup.org\/blog\/2017\/09\/21\/equifax-breach-round.html\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;My Equifax Breach Round-Up&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":134809,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[106,35,375],"tags":[1207],"class_list":["post-134808","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-plusposts","category-big-business","category-computer-security","tag-equifax"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2017\/09\/Equifax+HQ.jpgimgmax=660.jpg","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":136310,"url":"https:\/\/hill-kleerup.org\/blog\/2018\/05\/08\/so-last-years-equifax-breach-was-even-more-awful-than-previously-revealed.html","url_meta":{"origin":134808,"position":0},"title":"So last year&#8217;s Equifax breach was even more awful than previously revealed","author":"***Dave","date":"Tue 8-May-18 6:24pm","format":false,"excerpt":"Largely because Equifax didn't reveal a lot of the details because state laws didn't require them to. A certain amount of the data stolen for millions (tens of millions, hundreds of millions) of Americans is of vague concern because it's private information that is now presumably available to any black\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2017\/09\/Equifax%2BHQ.jpgimgmax%3D660.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":134597,"url":"https:\/\/hill-kleerup.org\/blog\/2017\/09\/07\/basically-consider-worst-personal-identity-data-breach-ever.html","url_meta":{"origin":134808,"position":1},"title":"So basically consider this the worst personal identity data breach ever","author":"***Dave","date":"Thu 7-Sep-17 6:27pm","format":false,"excerpt":"Equifax is one of the three major consumer credit reporting agencies, with oodles of information about every American consumer and their finances. And they got hacked, and about 143 million people's data -- addresses, SSNs, birth dates, even drivers license numbers -- are in the wild. They have a page\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2017\/09\/unnamed-3.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":134647,"url":"https:\/\/hill-kleerup.org\/blog\/2017\/09\/11\/the-equifax-debacle.html","url_meta":{"origin":134808,"position":2},"title":"The Equifax Debacle","author":"***Dave","date":"Mon 11-Sep-17 11:51am","format":false,"excerpt":"Yeah, pretty much this. I'm following along the news as the best \"next\" steps to take as a consumer. Things continue to change so fast in terms of (a) things Equifax is doing and (b) ways Equifax is being criticized for stuff they are doing, that taking any steps for\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2017\/09\/equifax-comic.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":132507,"url":"https:\/\/hill-kleerup.org\/blog\/2017\/01\/05\/if-you-cant-trust-a-credit-reporting-agency-who-can-you-trust.html","url_meta":{"origin":134808,"position":3},"title":"If you can&#039;t trust a credit reporting agency, who can you trust?","author":"***Dave","date":"Thu 5-Jan-17 2:30am","format":false,"excerpt":"Well, apparently, nobody.'[O]n Tuesday, the Consumer Financial Protection Bureau announced that two of the three major credit-reporting agencies responsible for doling out those scores\u2014Equifax and Transunion\u2014have been deceiving and taking advantage of Americans. The Bureau ordered the agencies to pay more than $23 million in fines and restitution. In their\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":134736,"url":"https:\/\/hill-kleerup.org\/blog\/2017\/09\/18\/social-security-numbers-broken-alternative.html","url_meta":{"origin":134808,"position":4},"title":"Social Security Numbers are broken. What is the alternative?","author":"***Dave","date":"Mon 18-Sep-17 11:41am","format":false,"excerpt":"We are increasingly a data-driven world. There are electronic records about us everywhere, and we rely on them in a thousand different ways to identify us. But anyone who's ever worked with a system that tries to reliably and consistently identify people knows that it's a problem. What identifier is\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2017\/09\/Equifax-HQ.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":134918,"url":"https:\/\/hill-kleerup.org\/blog\/2017\/10\/04\/irs-hired-equifax-help-verify-identity-yes-really.html","url_meta":{"origin":134808,"position":5},"title":"The IRS has hired Equifax to help verify your identity. Yes, really","author":"***Dave","date":"Wed 4-Oct-17 10:30am","format":false,"excerpt":"Equifax's CEO was just before congress testifying how the company's ineptness allowed a prolonged series of hacks to unveil the names, SSNs, DoBs, and other key identifying data of 150 million Americans (and some Canadians and Brits). That data could be invaluable in, among other things, tax fraud. Which is\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2017\/09\/Equifax%2BHQ.jpgimgmax%3D660.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/134808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=134808"}],"version-history":[{"count":1,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/134808\/revisions"}],"predecessor-version":[{"id":134815,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/134808\/revisions\/134815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media\/134809"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=134808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=134808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=134808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}