260
submitted 2 months ago by bilbobaggins@lemmy.world to c/privacy@lemmy.ml

You may have heard about a lawsuit filed regarding a data breach concerning social security numbers. I encourage you to read at least the first few pages of the linked class action complaint to see how massive a violation of privacy this is.

The data breach concerns National Public Data, a company which offers background checks. They collect personally identifiable information (PII) as a part of their business. The defendant claims that NPD scraped PII from non-public sources (¶11). NPD then stored the data in an insecure manner and did not adequately protect this personal information (¶25). Consequently, a hacking group by the name of "USDoD" stole records of 2.9 billion individuals from NPD. According to the document, the data was independently reviewed by VX-underground, the cybersecurity company. They confirmed the breach included full names, address and address history, and social security numbers. They were also able to identify familial connections, both living and deceased (¶ 22-24).

Based on this class action complaint, NPD's conduct was grossly negligent, leading to potential identity theft for almost anyone in the United States. It was also a massive privacy violation by scraping data from non-public sources. Even after they took millions of Americans personal information, they failed to secure the data from hackers.

Criminals can ruin your life if they target you with this information. They can open lines of credit without you knowing. You might only find out until creditors call you, demanding that you pay them back (¶60).

So, yeah. I am very concerned. I'll have to figure out how to defend against this identity theft. Overall, I'm new to the privacy community, but I'm feeling like "privacy" in the United States is an absolute mess. If your data wasn't somewhere on the dark web, it might be now. Protect your data. Stay safe.

you are viewing a single comment's thread
view the rest of the comments
[-] MajorHavoc@programming.dev 25 points 2 months ago* (last edited 2 months ago)

What does freezing your credit do, exactly?

It prevents opening new credit cards or other lines of credit in your name.

The reason this matters is lots of fraudsters are using names and SSNs they bought on the dark web, to open credit cards they have no intention of paying back.

If you're an American, your name and SSN combination is almost certainly for sale for about 25 cents, on the dark web, today.

Freezing your credit at all three agencies is the only effective prevention, today.

The credit agencies will attempt to charge you a monthly fee for the privilege, but don't fall for it. They're legally required to provide the service for free.

If I'm ever a juror on a murder trial where the "victim" worked in leadership at one of the big three credit agencies, I'll have to admit that I couldn't possibly convict someone for that.

Is this still something someone should do if they don't even have any credit cards?

Yes. Absolutely. Being a victim of credit fraud can make it impossible to get a home mortgage, or even get certain jobs or apartments. It can be incredibly difficult and expensive to clean up, and the burden is largely left entirely on the victim.

[-] brbposting@sh.itjust.works 13 points 2 months ago

Thanks, Major. How hard is it for fraudsters to unfreeze credit?

[-] MajorHavoc@programming.dev 7 points 2 months ago* (last edited 2 months ago)

Generally they need all of your personal information (Full Name, Date of Birth and SSN - which costs them 25 cents or less on the dark web), plus your username and password that you create when you first visit each site. (Which hopefully isn't on the dark web, because it's new and unique.)

The new username and password that you create are what give some security.

And a warning, only because someone reading along will need it:

don't re-use a password used elsewhere.

Re-used passwords, from past data breaches, paired nicely with email addresses and full names, also cost about 25 cents on the dark web.

[-] brbposting@sh.itjust.works 4 points 2 months ago

Oh nice

Bitwarden FTW! (If they get hacked it’ll only take, oh, an entire day to change all my passwords 😉 you’re probably a KeePass person?)

[-] MajorHavoc@programming.dev 3 points 2 months ago

you’re probably a KeePass person?

Yeah. I feel seen. Naturally I try to only use the finest artisinal open source from F-Droid.

Though, honestly, I'm impressed by BitWarden and I'm happy enough to recommend it.

[-] brbposting@sh.itjust.works 1 points 2 months ago

Ahaha good then my lazybones aren’t doing too bad!

[-] ampersandcastles@lemmy.ml 5 points 2 months ago

How can anyone genuinely write that and still support any country that imposes it.

Laughable. Fuck this country.

[-] MajorHavoc@programming.dev 6 points 2 months ago* (last edited 2 months ago)

Uh... I'm a patriot.

I fully support my country in every meaningful way, especially those ways that might otherwise make my billionaire overlords feel threatened enough to put a hit out on me.

More seriously, my neighbors are, on average, fantastic people, that deserve my support.

Edit: To be clear, I fully agree that this should piss us all off.

[-] ampersandcastles@lemmy.ml 3 points 2 months ago

Your neighbors are probably ones being mistreated by this country.

Support the people, not the country.

The US is a cesspool.

[-] refalo@programming.dev 2 points 2 months ago

Have you seen people?

[-] MajorHavoc@programming.dev 1 points 2 months ago

Support the people, not the country.

I agree wholeheartedly.

this post was submitted on 15 Aug 2024
260 points (98.9% liked)

Privacy

31609 readers
512 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS