Slashdot Mirror
Stolen SSN, Credit Bureaus Alerted , Now What?
privacyIntruded asks: "Recently I was informed by a former employer that a computer containing my name, address, drivers' license information, and social security number had been hacked. Though they do now know what, if any, information was accessed on the computer, they recommended I place a fraud alert on my credit report. To my relief, after placing the alert, I received credit reports that look fine. Now what? Assuming that someone does have the information, do I just wait for the day when someone uses the information for fraud, then hope I can minimize the damage when it is? Is there anything I can do to reduce the risk?"
I'm sure your info has been leaked before, they just didn't tell you. So go back and buy more stuff.
You can always call your credit card company and tell them you lost your credit card. They will gladly send you a new one with a different number.
Good luck anyway - I hope that nothing bad happens to your credit.
\/\/oobie
I recently had my informatiuon used against me (1800$ fanished from my account over night, which put me in a bad position as I was about to leave for vacation in 2 days). Anyways, the money was taken from where I was 3 months prior, so if this happened recently, I suggest you change what is feasibly changeibile before it bites you in the ass in a few months after you forgotten about it.
Inform people this happened, so they don't become victims too. If something had been used already, talk to whoever is in change (if your bank acocunt has been broken in to, the banks will often give you a paper to sign saying they will incur any damages as long as you don't sue them).
There may also be a victim support group somewhere to attend if you are mentally distrought, but since you are on the internet, I'm sure you have gotten around to accepting you ahve no privacy by now.
-------
Support Indy Music. Buy
- Invent a new set of 4 passwords. Make them impossible to guess, 8 chars with upper and lowercase, NOT WORDS!, and at least two nonsequential numbers. Something like "FjW7zk2a". Don't practice typing them until you fix your box (see below). Create a paper list of them, memorize them well, then once you can remember them easily for 2 weeks (vital for long term memory), destroy the list or put it in a safe deposit box.
- Invent a further password that you can use all the time, that you know to be a 'dumb' password that you use to log into websites like slashdot or imdb. Make sure you only use the dumb password for dumb applications, and the good ones (above) for stuff like signing in to your online brokerage or bank's transfer-money-type-website.
- Fix your box or get a new one. Make sure it has Norton or MacAfee Antivirus on it, plus a good firewall, plus AdAware's SpyAssasin (recognized as best by most of my group of IT/InfoSec friends). Only when your box is secure should you do any online activity.
- Call your credit card companies and request a new card from each of them. Tell them you believe your card number has been compromised and wish a new card.
- While you're on the phone with your credit card companies, tell them you add an additional password to your account that they must request and you must provide whenever you talk with them. Chase and Discover at least both do this and have honored my request for it. This adds quite a bit of new security to your account.
- Visit your bank, and close your existing accounts. Transfer the money to at least two new accounts. One of those accounts should NEVER EVER have any EFT (electronic fund transfer) transactions into/out of it. If your bank allows it, request that the account type prohibit that kind of activity. The other account should be an everyday checking or savings account that you can have the EFT's done with.
- You mentioned contacting the credit bureaus and having a fraud listing attached to your account. This is good; it is free and effective.
- If you currently have a Debit card, cut it up. Ask your bank for a card that ONLY does ATM transactions and nothing else. You are NOT protected if a debit card is stolen or misused - your money is GONE. Credit card companies protect you from paying more than $50 if a card is stolen / misused.
- Re-read your last 6 months of credit card bills. Make sure you understand each charge on it. This allows you to have the familiarity to immedately spot fraudulent charges on your bill(s) and thus to react more quickly if there is a problem.
- If you feel it necessary, there are companies out there who will do credit reports daily (if not the credit bureaus themselves) and email you if there is any significant activity (new accounts opened, etc., something goes to a collection agency, etc.). This service will probably cost you about $200 per year or so, but might be worth it for your peace of mind.
Just some ideas. Best of luck to you.Unitarian Church: Freethinkers Congregate!
In three to six months, get a fresh copy of your credit report from the credit bureau. Also, see this site about ID theft issues. It provides a pretty good cheat sheet for what to do in your situation.
I had the same thing happen to me last year. We had a break-in at the firm which handled my last company's payroll, which later turned out to be an inside job. Fortunately, I haven't had any problems, and I hope you don't either.
It's good to use your head, but not as a battering ram.
All I need in order to help you is your name, address, driver's license information, and social security number. ;>
Purchase Equifax Identity Theft Protection. Not only will they notify you by email any time your credit report changes (e.g. new credit being taken out, etc), but they will insure you in case something happens.
I recommend that everyone does this these days. Your information is out there and easily collected by those that want it. Your information IS NOT safe.
The reason that it can be true that 1+1 > 2 is that very peculiar nonzero value of the + operator
I wish you would not make shit up. Here is what can be done to get a new ssn.
The SSA has a new publication on what to do When Someone Misuses Your Number discussing Identity Theft in general terms. It says If you can prove that you're being disadvantaged because someone used your Social Security number, visit your local Social Security office to request a new one. If you've done all you can to fix the problem and someone is still using your number, under certain circumstances, we may assign you a new number. which seems not to promise anything, and to leave the discretion in the hands of the local office. They do recommend that you file a report with both Social Security Fraud Hotline at 1-800-269-0271 and the FTC.
You wouldn't happen to work at the Bush Campaign Offices, would you? =)
"Yeah, well, Dracula called and he's coming over tonight for you and I said okay."
For those of us not as unlucky as the original poster, there is a lot of information available at EPIC
Can't you see that everyone is buying station wagons?
You processed the fraud alert...
You are done... now it is up to your credit companies to deal with unlawful inquiries... you put them on alert that you may have unwanted access happening.
If they want to minimize their own risk they will issue you new cards, etc.
you have reported... you can now request new cards and move on....
that's it... fairly simple...
-james
A fool throws a stone into a well and a thousand sages can not remove it.
see the visa's zero liability policy The Zero Liability policy covers all Visa credit and debit card transactions processed over the Visa network--online or off. The only transactions not covered under the Zero Liability policy are commercial card, ATM, and non-Visa-branded PIN transactions.
If your bank won't treat it as such, you can write Visa, and they'll work on it.
every day http://en.wikipedia.org/wiki/Special:Random
In some states, e.g., Texas, you can get what is called a credit freeze. This locks out credit applications and is probably worth the effort to obtain.
Be patient and don't worry. There's really nothing that can be done to you that cannot be undone with a little time and paperwork. I used to worry and go ballistic after I suffered identity theft. But then one day I heard a lawyer speaking about it and he made the point that, when fraudulent purchases or applications are made in your name, it is (at most) necessary that you file a letter (to the foolish firm who extended credit to an imposter - not to the credit bureaus) explaining that the application/purchases were fraudulent. That made me rest easy.
Check your credit reports from the major credit bureaus (Experian, Equifax, Trans-Union and the new one, ChoicePoint) every 6 months. Write letters to all firms that received fraudulent applications for credit, explaining that the application was fraudulent and not made by you. It is by law their responsibility to then properly update the credit bureaus' reports. Keep copies (one folder for each account) of your letters and be persistent but patient.
The credit bureaus will not change a credit report at your request - they only will change it in response to a request from one of your (supposed or real) creditors. So don't get irritated at the credit bureaus. While they are not your friend (after all, they invented this silly system without asking anyone's permission and ought to be sued by the government for malfeasance), they are not your enemy.
Identity theft on ones's self? Is it even possible?
Of course it is. Find other people to fill out and sign applications in your name, at other addresses. Make sure no fingerprints are on it. When the cards come, go get the cash advances with your cohort. Just make sure you aren't in the ATM camera's view. If your accomplice takes off with the card, it's easy to cancel it.
Since your SSN situation is kinda fucked at the moment, why not turn lemons into lemonade?
1. Get a new SSN number. Seriously.
2. Goto the bank and have them transfer your money into new accounts and have them issue you new a ATM/debit card and checks.
3. Also have your bank restrict the types of EFT's that can be done to your account.
4. Have a new credit card issued and ask that your account be assigned a password.
5. Contact the company that your 401k and have modify your account so that only in person can any withdrawls or wiring of money can occur.
Yes Francis, the world has gone crazy.
It's going to get harder to prevent people from getting your SSN number. It's now required on anything imported by you. So if you purchase a $30 cd-burner from Canada, you now has to supply the vendor with your SSN number so he can ship it to you.
It use to be that was only required on shipments over $1000 but now it's required on all shipments. So you government isn't helping the situation.
You can go down to your local SS office and ask for a new SSN. This is painful, time consuming and difficult because you will need to notify all of the businesses that you used the old SSN ligitamiteley (such as credit cards, mortgages, loans etc.) They may reject the change, but then if you get into a bigger pickle with identity theft, you can hire a lawyer and sue SS.
Quit playing Monopoly with Bill.
Linux - of the people, by the people, and for the people.
The biggest thing to watch for is a change of address on your credit report, it means that someone has opened an account and the statements are going to someplace you aren't, bad sign.
Mistaken Identity is probably a bigger problem than Identity theft, there is a woman localy, who's first name, last name and middle initial is the same as my wife's, who's SSN is one digit different, who's driver's license is one digit different and she seems to like bouncing checks and not paying taxes or hospital bills.
Apocalypse Cancelled, Sorry, No Ticket Refunds
The problem is not limited to SSNs - other identifiers that people think are unique are often duplicated.