![]() You’d just think that Equifax, having failed so badly at security before, would want to make its setup a little more robust - even meeting basic standards would be good.Īs Krebs points out, however, it’s in your interest to set up an account with your actual email address and information, since if you don’t, it seems pretty much anyone with a few data points on you can do so themselves, gaining the ability to freeze and unfreeze your credit. This is bad but at least Equifax isn’t alone: It looks like credit reporting agencies Transunion and Experian also have ways of getting around PINs. Please download this form for instructions and mailing address. Even elementary security standards like confirming the email address aren’t “embraced,” and multi-factor authentication is trivial to bypass. ![]() The account set-up process, which involves the creation of a username and password, relies on both user inputs and other factors to securely establish, verify, and authenticate that the consumer’s identity is connected to the consumer every time. We deployed an experience that embraces both security standards (using a multi-factor and layered approach to verify the consumer’s identity) and reflects specific consumer feedback on managing security freezes and fraud alerts online without the use of a PIN. When Krebs asked a company representative about this, they explained: Yes, this poorly secured website specifically does not require a PIN, though a PIN is required for the same requests via phone or email. Oh, and don’t worry - if you established a PIN for this purpose when setting this up previously, you won’t need that. One you have been “verified” with this process, you can immediately request a security freeze on your credit report, or unfreeze it if it’s frozen. It does ask a few verification questions, but as Krebs points out these are often public information, such as the street you live on, or your mother’s maiden name, and as such rather worthless for security purposes. To place a security freeze on your Equifax credit report, create a myEquifax account. The recent news from one of the big four credit. ![]() Slight problem: SSN and DOB were among the personal data leaked in the Equifax breach to begin with! And it doesn’t even check that you own the email address you submit. Today it was just announced that the Equifax security data leak may have touched 2.5 million more American consumers than previously reported. A year later, Equifax lost your data but faced little fallout
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |