# Equifax hacked **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [September 7, 2017, 10:21pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760 "2017-09-07T22:21:05Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\ **Post date:** [September 7, 2017, 10:21pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/1 "2017-09-07T22:21:05Z")
Equifax hacked; [potentially impacting approximately 143 million U.S. consumers](https://www.equifaxsecurity2017.com/). That’s more than ½ of the US population \> 18 yo (those who can presumably open accounts) :eek: > [@Equifax](#): > > The information accessed primarily includes names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. In addition, credit card numbers for approximately 209,000 U.S. consumers, and certain dispute documents with personal identifying information for approximately 182,000 U.S. consumers, were accessed. Is the security model now broken with the identifying info of the majority of the population now potentially out on the black market? ---
**Author:** ![Driver8](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@Driver8](https://boards.straightdope.com/u/Driver8)\ **Post date:** [September 7, 2017, 11:31pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/2 "2017-09-07T23:31:36Z")
I think there have been so many leaks that the average person ought to assume that the bad guys have had their SSN, etc. for quite some time now. So yes, the model is broken but it already was broken. I’m not sure how catastrophic the consequences need to be before companies take operational security seriously. I’m sort of surprised we haven’t already seen large scale drainage of people’s accounts. It seems the only thing standing between many people’s online access and the bad guys is often a set of easy to look up questions and answers. Anyway, this is where their priorities are so don’t expect major changes anytime soon: [Bloomberg - Are you a robot?](https://www.bloomberg.com/amp/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack) ---
**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\ **Post date:** [September 7, 2017, 11:35pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/3 "2017-09-07T23:35:22Z")
> [@Driver8](#): > > Anyway, this is where their priorities are so don’t expect major changes anytime soon: [https://www.bloomberg.com/amp/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack](https://www.bloomberg.com/amp/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack) In all fairness to the accused, we can’t assume they sold the stock based on inside information. Yeah, sure. :rolleyes: ---
**Author:** ![MaxTheVool](https://avatars.discourse-cdn.com/v4/letter/m/9fc29f/32.png) [@MaxTheVool](https://boards.straightdope.com/u/MaxTheVool)\ **Post date:** [September 8, 2017, 12:58am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/4 "2017-09-08T00:58:03Z")
Anyone have any good advice as to what, if anything we should do in response to this particular breach? Doesn’t seem like it’s at all relevant whether or not we, say, change our online banking passwords? ---
**Author:** ![bobot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bobot/32/21622_2.png) [@bobot](https://boards.straightdope.com/u/bobot)\ **Post date:** [September 8, 2017, 1:03am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/5 "2017-09-08T01:03:25Z")
I may have my particular facts a little wrong, but I believe I heard that Equifax was offering something like 1 year of free credit monitoring to every single American. I think you have to contact them and ask for it. (ETA: I don’t mean “single” to mean unmarried or unpartnered- you know what I meant.) ---
**Author:** ![erysichthon](https://avatars.discourse-cdn.com/v4/letter/e/d07c76/32.png) [@erysichthon](https://boards.straightdope.com/u/erysichthon)\ **Post date:** [September 8, 2017, 1:27am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/6 "2017-09-08T01:27:24Z")
Looks like we all need to get new Social Security numbers! Oh, wait, we can’t do that. Never mind; we’re all screwed. ☹ ---
**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\ **Post date:** [September 8, 2017, 1:31am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/7 "2017-09-08T01:31:37Z")
From what I can tell, yes, credit monitoring and identify theft protection for everyone. Go to [https://www.equifaxsecurity2017.com](https://www.equifaxsecurity2017.com) and click the big Potential Impact button at the bottom. Enter your last name and last 6 of your SSN, and if they identify you as at risk, they’ll say so, otherwise, they’ll give info on enrolling in their credit protection as well as the date when you can do so. Apparently they’re staggering enrollments so their servers aren’t melted when the entire adult population of the US tries to register on the same day. ---
**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\ **Post date:** [September 8, 2017, 1:44am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/8 "2017-09-08T01:44:54Z")
> [@Driver8](#): > > I think there have been so many leaks that the average person ought to assume that the bad guys have had their SSN, etc. for quite some time now. So yes, the model is broken but it already was broken. I agree, but two things that this one has that previous ones didn’t. - Sheer size; over ½ of the over-18 population in this country - DL #s; you can’t even rely on seeing a DL now to ensure the person is who they say they are. You don’t think someone buying this info on the dark web doesn’t have the connections &/or ability to make fake DL’s? > [@MaxTheVool](#): > > Anyone have any good advice as to what, if anything we should do in response to this particular breach? > > Doesn’t seem like it’s at all relevant whether or not we, say, change our online banking passwords? You can’t change the password on an account you don’t know exists. The only thing one can do is _diligently_ monitor your credit reports for any new accounts being opened & hope they’re reported timely. Personally, I wouldn’t sign up for something like LifeLock; it’s $120/year for what you can do yourself. That’s a pretty expensive insurance policy for what you get from them IF you need their services. When I was the victim of ID theft, a credit card was opened in my name but the mailing address was somewhere else; it didn’t show up in the credit reports until it was delinquent, which only took a couple of months to run up a 5-figure balance as they paid the minimum due for the first couple of months, which was a nominal amount. ---
**Author:** ![asterion](https://avatars.discourse-cdn.com/v4/letter/a/4da419/32.png) [@asterion](https://boards.straightdope.com/u/asterion)\ **Post date:** [September 8, 2017, 2:32am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/9 "2017-09-08T02:32:48Z")
I figure if I’m affected (I haven’t looked yet), this is probably the fourth or fifth time for my information. I’m practically desensitized to it by now. ---
**Author:** ![OttoDaFe](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ottodafe/32/356_2.png) [@OttoDaFe](https://boards.straightdope.com/u/OttoDaFe)\ **Post date:** [September 8, 2017, 2:37am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/10 "2017-09-08T02:37:51Z")
> [@gotpasswords](#): > > From what I can tell, yes, credit monitoring and identify theft protection for everyone. > > Go to [https://www.equifaxsecurity2017.com](https://www.equifaxsecurity2017.com) and click the big Potential Impact button at the bottom. Enter your last name and last 6 of your SSN, and if they identify you as at risk, they’ll say so, otherwise, they’ll give info on enrolling in their credit protection as well as the date when you can do so. Apparently they’re staggering enrollments so their servers aren’t melted when the entire adult population of the US tries to register on the same day. I’m a little confused. I went to the link and provided the information requested; I wasn’t told I was at risk, but was given an enrollment date for the credit protection service (which would seem to imply that I _am_ at risk). Not sure I’ll take them up on their offer, since a) I’m borderline obsessive about keeping on top of my bank and credit accounts, and b) I already have several flavors of credit protection through organization memberships and my homeowner’s insurance. And I rather imagine that after a year they’ll just start charging the clients with little or no notice. ---
**Author:** ![Happy\_Lendervedder](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/happy_lendervedder/32/8488_2.png) [@Happy\_Lendervedder](https://boards.straightdope.com/u/Happy_Lendervedder)\ **Post date:** [September 8, 2017, 2:39am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/11 "2017-09-08T02:39:52Z")
Ok, so I clicked on the “Potential Impact” to see if my information was potentially impacted, gave my last name and last six digits, but the only message I got was with a date for enrollment. Why didn’t they tell me if I was impacted or not? ---
**Author:** ![Miller](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/miller/32/481_2.png) [@Miller](https://boards.straightdope.com/u/Miller)\ **Post date:** [September 8, 2017, 4:49am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/12 "2017-09-08T04:49:32Z")
Before you accept that free credit monitoring system, be aware that by agreeing to it, [you may be waiving your right to sue Equifax over their mishandling of your data.](https://techcrunch.com/2017/09/07/equifax-data-breach-help-site-leaves-consumers-with-more-questions-than-answers/?ncid=mobilenavtrend) ---
**Author:** ![OttoDaFe](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ottodafe/32/356_2.png) [@OttoDaFe](https://boards.straightdope.com/u/OttoDaFe)\ **Post date:** [September 8, 2017, 5:56am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/13 "2017-09-08T05:56:12Z")
> [@Miller](#): > > Before you accept that free credit monitoring system, be aware that by agreeing to it, [you may be waiving your right to sue Equifax over their mishandling of your data.](https://techcrunch.com/2017/09/07/equifax-data-breach-help-site-leaves-consumers-with-more-questions-than-answers/?ncid=mobilenavtrend) That’s some catch, that Catch-22. ---
**Author:** ![Shalmanese](https://avatars.discourse-cdn.com/v4/letter/s/45deac/32.png) [@Shalmanese](https://boards.straightdope.com/u/Shalmanese)\ **Post date:** [September 8, 2017, 6:22am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/14 "2017-09-08T06:22:46Z")
> [@gotpasswords](#): > > From what I can tell, yes, credit monitoring and identify theft protection for everyone. > > Go to [https://www.equifaxsecurity2017.com](https://www.equifaxsecurity2017.com) and click the big Potential Impact button at the bottom. Enter your last name and last 6 of your SSN, and if they identify you as at risk, they’ll say so, otherwise, they’ll give info on enrolling in their credit protection as well as the date when you can do so. Apparently they’re staggering enrollments so their servers aren’t melted when the entire adult population of the US tries to register on the same day. This is a pretty boneheaded move by them. There’s no way for the average person to verify that [equifaxsecurity2017.com](http://equifaxsecurity2017.com) is owned by equifax and isn’t a phishing site started up to take advantage of this breach. Equifax should not be training people to go to random domains and entering in personal information. ---
**Author:** ![jtur88](https://avatars.discourse-cdn.com/v4/letter/j/e9c0ed/32.png) [@jtur88](https://boards.straightdope.com/u/jtur88)\ **Post date:** [September 9, 2017, 9:09am UTC](https://boards.straightdope.com/t/equifax-hacked/795760/15 "2017-09-09T09:09:06Z")
The entire concept of credit reporting agencies is an archetype of “what could possibly go wrong?” ---
**Author:** ![Shalmanese](https://avatars.discourse-cdn.com/v4/letter/s/45deac/32.png) [@Shalmanese](https://boards.straightdope.com/u/Shalmanese)\ **Post date:** [September 9, 2017, 2:04pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/16 "2017-09-09T14:04:58Z")
It now appears that the checker Equifax is promoting [isn’t doing any checking at all](https://techcrunch.com/2017/09/08/psa-no-matter-what-you-write-equifax-may-tell-you-youve-been-impacted-by-the-hack/?ncid=rss) and is solely there to upsell you into identity protection services. Entering clearly made up data returns that you might have been affected and entering in the same information multiple times returns different results. ---
**Author:** ![Driver8](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@Driver8](https://boards.straightdope.com/u/Driver8)\ **Post date:** [September 9, 2017, 6:54pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/17 "2017-09-09T18:54:33Z")
So what is a comprehensive list of all the possible implications of this breach? It seems like they have enough information to at least semi-plausibly pretend to be almost anyone. Is there a chance of flooding the IRS with an enormous number of fake refund-heavy tax filings? To the extent that even if only a small percentage of them are plausible enough to result in refunds it is still a huge amount of money? After all, with 140 million tries available you don’t have to be right a lot. I’m sort of imagining that trying to sort out the fraudulent from the legitimate on such a huge scale would effectively kill the regular tax collecting infrastructure … ---
**Author:** ![Riemann](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/riemann/32/3133_2.png) [@Riemann](https://boards.straightdope.com/u/Riemann)\ **Post date:** [September 9, 2017, 7:09pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/18 "2017-09-09T19:09:51Z")
> [@Shalmanese](#): > > This is a pretty boneheaded move by them. There’s no way for the average person to verify that [equifaxsecurity2017.com](http://equifaxsecurity2017.com) is owned by equifax and isn’t a phishing site started up to take advantage of this breach. Equifax should not be training people to go to random domains and entering in personal information. On a par with my credit card fraud prevention service _calling me_ on the phone, and then asking me for critical personal information to identify myself. Fucking morons. ---
**Author:** ![Riemann](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/riemann/32/3133_2.png) [@Riemann](https://boards.straightdope.com/u/Riemann)\ **Post date:** [September 9, 2017, 7:12pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/19 "2017-09-09T19:12:17Z")
> [@Shalmanese](#): > > …solely there to upsell you into identity protection services… That was my suspicion too. It’s like a mob protection racket. Pay us to protect you from “accidents”. ---
**Author:** ![Leaper](https://avatars.discourse-cdn.com/v4/letter/l/4bbf92/32.png) [@Leaper](https://boards.straightdope.com/u/Leaper)\ **Post date:** [September 10, 2017, 9:28pm UTC](https://boards.straightdope.com/t/equifax-hacked/795760/20 "2017-09-10T21:28:51Z")
OK, so I did do the check, and it did say it could impact me, although I do see the link above. I have taken free credit monitoring from a previous potential breach on the company level years ago, and I think I’m good at resisting upselling. Should I take the monitoring Equifax is offering, since it’s better than nothing? If not, what SHOULD I be doing? [Next page](https://boards.straightdope.com/t/equifax-hacked/795760.md?page=2)