And here is Remy Porter’s post about the idiocy known as Equifax:
Equifax apparently doesn’t know what security is
Encounters with Equifax
- They let crackers grab personal info.
- They offer free year of credit monitoring, which only catches things AFTER SOMEONE STEALS YOUR IDENTITY AND OPENS UP ACCOUNTS IN YOUR NAME.
- Trying to put on a credit freeze using their website reported that they were “unable to process at this time.”
- Trying to go to their consumer Customer Service Center page gave me only a Java server (JSP) error about an IllegalException.
And now Equifax corporate execs are selling their shares in Equifax? I think my opinion of Equifax has me hoping they be up on charges of illegal, criminal negligence.
For contrast, I put in credit freezes at TransUnion and Experian WITH NO PROBLEMS AT ALL.
They finally let me put in a credit freeze for my wife. It was her info they gave to crackers. So they didn’t charge us for the freeze.
When I tried to put one in for myself, they announced that they couldn’t process it and that I should MAIL them the info (with fee). Is it just me, or is Equifax the LEAST functional of all the credit reporting agencies?
Equifax finally let me put in a credit freeze. My son-in-law, who works in IT, told me earlier that the Equifax Security site (about the crack) has been known to provide different results depending on what IP you come from, and can be wrong about half the time. So earlier today I rechecked my end of it, and they still were saying “As far as we know, you’re not affected by this.” So tonight I put in a credit freeze on my credit report. They didn’t charge me for it, so I think they’re finally getting the idea …
Also, Equifax “retired” their Chief Information and Chief Security Officers today. Replaced them with the immediate underlings who would have been the people actually responsible for making sure the security updates were applied to their server … so I don’t necessarily consider this an improvement.
These are the people behind:
Equifax reportedly used ‘admin’ as password in Argentina
Equifax’s hack checker is a hot mess — here’s what to do
Equifax’s credit-monitoring site also reportedly hackable
As security expert Bruce Schneier pointed out in his essay On The Equifax Data Breach:
This market failure isn’t unique to data security. There is little improvement in safety and security in any industry until government steps in. Think of food, pharmaceuticals, cars, airplanes, restaurants, workplace conditions, and flame-retardant pajamas.
Market failures like this can only be solved through government intervention. By regulating the security practices of companies that store our data, and fining companies that fail to comply, governments can raise the cost of insecurity high enough that security becomes a cheaper alternative.
Just put in a credit history freeze, and put up with having to pay a fee when you need to temporarily unfreeze it to get that car loan or mortgage you want.
And hope that Senator Warren’s bill to require no-cost credit freeze changes is passed by our otherwise hateful and dysfunctional Republican-controlled Congress.