Equifax blames hack on state actors, but breach followed spat with security contractor / Boing Boing
Equifax sources say that the massive breach of 140,000,000 Americans’ personal information was the result of state-sponsored hackers, likely from China, but attribution is hard and inexact.
One thing we can attribute the breach to, though, is bungling. Equifax and Mandiant — its independent security contractor — got into “a squabble” just as the hackers were breaking into Equifax’s systems, and by the time everything had been smoothed over, the attackers had installed 30 web-shells in Equifax’s systems, any one of which would allow attackers to have free run of Equifax’s data.
In the years preceding the breach, then-Equifax CEO Richard Smith […] Read more
ALBANY — The Equifax data breach — and the company’s response to it — has state lawmakers readying new measures to boost consumer protections and better scrutinize credit monitoring agencies.
State Assemblyman Jeffrey Dinowitz (D-Bronx) blasted Equifax’s handling of the breach as “outrageous.”
He said he’ll introduce a bill Monday requiring credit monitoring agencies to provide lifetime identify theft protections to anyone whose vital information is stolen during a breach of their systems.
The bill also would stop the agencies from charging fees for security freezes placed on credit reports of people whose vital information is compromised.
N.Y. AG asks credit bureaus about […] Read more
Tami Chappell | Reuters
Credit reporting company Equifax corporate offices are pictured in Atlanta, Georgia, September 8, 2017.
Equifax has been scrambling to respond to the outpouring of criticism about the breach, in which hackers took personal information like Social Security numbers, names, addresses and birth dates for up to 143 million consumers. The company said it discovered it in late July. It didn’t disclose it publicly until Sept. 7.
Some critics have pointed out that Equifax might have prevented the issue by moving more quickly to update the security. A flaw in a web application it used […] Read more
Equifax data breach: Massachusetts Attorney General Maura Healey to sue for violating state consumer protection laws
Equifax is under new government pressure to explain how hackers stole the personal data of as many as 143 million Americans. The House Energy and Commerce Committee summoned the company’s CEO to testify at a hearing next month. Since revealing the massive security breach, the company has been besieged by angry consumers and a variety of state and federal officials who all want answers. About 40 state attorneys general are also investigating.
Massachusetts Attorney General Maura Healey
[…] Read more
State Treasurer State of Michigan boosted its stake in shares of Equifax, Inc. (NYSE:EFX) by 0.4% during the second quarter, according to its most recent disclosure with the Securities and Exchange Commission. The institutional investor owned 48,846 shares of the credit services provider’s stock after buying an additional 200 shares during the period. State Treasurer State of Michigan’s holdings in Equifax were worth $6,712,000 at the end of the most recent reporting period.
Other large investors have also recently made changes to their positions in the company. Ipswich Investment Management Co. Inc. increased its stake in Equifax […] Read more
State Treasurer State of Michigan increased its stake in Equifax, Inc. (NYSE:EFX) by 0.4% during the second quarter, according to its most recent disclosure with the Securities and Exchange Commission. The institutional investor owned 48,846 shares of the credit services provider’s stock after buying an additional 200 shares during the period. State Treasurer State of Michigan’s holdings in Equifax were worth $6,712,000 at the end of the most recent reporting period.
A number of other large investors also recently made changes to their positions in the company. BlackRock Inc. increased its stake in shares of Equifax by 1,540.8% in the […] Read more
By Adam Lidgett
Law360, New York (April 13, 2017, 1:38 PM EDT) —
A State Farm job applicant on Wednesday asked the Ninth Circuit to reverse a quick win given to the insurance company in his suit alleging that it improperly considers job applicants’ credit reports and fails to notify them of their rights, saying the district court erred in finding that he didn’t have standing.
Plaintiff Bobby Dutta filed his opening brief in the Ninth Circuit appealing a district […] Read more