Slashdot Mirror


In a Highly Unusual Move, FTC Confirms It Is Investigating Equifax (reuters.com)

The Federal Trade Commission (FTC) on Thursday confirmed it is investigating Equifax's handling of a data breach affecting 143m Americans. "The FTC typically does not comment on ongoing investigations. However, in light of the intense public interest and the potential impact of this matter, I can confirm that FTC staff is investigating the Equifax data breach," said Peter Kaplan, the commission's acting director of public affairs. Washington Post reporter tweeted: "To put a finer point on it, this is really, really unusual -- the FTC hardly ever says anything about ongoing probes."

30 of 117 comments (clear)

  1. Trump will fix this. by Anonymous Coward · · Score: 4, Insightful

    Slap on the wrist, formal apology issued, dinner and drinks at the White House with the executives of the company so that they can swear fealty, and back to #MAGA. Next problem? This is easy.

    1. Re:Trump will fix this. by Anonymous Coward · · Score: 3, Insightful

      Slap on the wrist, formal apology issued, dinner and drinks at the White House with the executives of the company so that they can swear fealty, and back to #MAGA. Next problem? This is easy.

      And don't forget the most important thing: Trump will finally be able to get loans from American banks again.

    2. Re:Trump will fix this. by CaptnCrud · · Score: 3, Insightful

      I'm no trump fan but you could pretty much insert any president's name from the last 20 years in this statement and it would still be true....

  2. Of course,it's the most singificant data break yet by evolutionary · · Score: 3, Interesting

    It would be surprising is there WASN'T an investigation given Equifax has credit and personal info on a huge number of the US population and controls credit access of virtually the entire country. Probably should have been more government monitoring for security which I would guess will occurs after a post-mortem of this incident.

    --
    "Imagination is more important than knowledge" - Einstein
  3. Politicans were affected by Merk42 · · Score: 3, Insightful

    Since politicians' identities were compromised along with the unwashed masses, OF COURSE they are going to investigate and make it known.

  4. Re:Of course,it's the most singificant data break by courteaudotbiz · · Score: 2

    Probably should have been more government monitoring for security which I would guess will occurs after a post-mortem of this incident.

    Seriously, you really think governments care about folks having their data leaked? If top govt execs info was leaked, then maybe we would get something real, but right now, all we'll see is a fake investigation with, as usual, no one going to jail or paying fines.

  5. Re:Of course,it's the most singificant data break by freeze128 · · Score: 3, Insightful

    What makes you think that politicians' identities are exempt from this breach?

  6. Re:Of course,it's the most singificant data break by OzPeter · · Score: 3, Insightful

    It would be surprising is there WASN'T an investigation given Equifax has credit and personal info on a huge number of the US population and controls credit access of virtually the entire country.

    I'm not sure that the FTC actually cares about the data that was leaked. On the other hand those allegations of insider trading due to the breach are certainly to interest to them.

    --
    I am Slashdot. Are you Slashdot as well?
  7. Re:Unusual would be NTSB investigating this by ColdWetDog · · Score: 3, Funny

    I don't think that would be unusual. After all, the NTSB is charged with investigating train wrecks.

    --
    Faster! Faster! Faster would be better!
  8. I'm up for a corporate death penalty by Just+Some+Guy · · Score: 5, Insightful

    I support the death penalty. So much, in fact, that I want to see Equifax executed - in this case, by having its corporate charter revoked. They're not "too big to fail". They're not providing a valuable product to our economy. They're not America's Last Great Hope at manufacturing or anything like that. They're a rent-seeking parasite on the economy who obviously can never again be trusty with the weaponizable data they collect on everyone who lives here. Cut off its head - sacrifice it on the altar of accountability and justice - and call it done.

    And as we'd lock up a street-level criminal until their trial, Equifax should be imprisoned by having its bank accounts and stock trades frozen immediately. Sure, that means it can't pay its CEO. Yes, it means its employees will break up with it in favor of more upstanding members of society. Yeah, it means it won't be able to pay rent and will probably get evicted. If all that's good enough for Joe Accused Weed Dealer, it's good enough for Equifax Accused Stalker.

    --
    Dewey, what part of this looks like authorities should be involved?
    1. Re:I'm up for a corporate death penalty by bev_tech_rob · · Score: 3, Interesting

      I support the death penalty. So much, in fact, that I want to see Equifax executed - in this case, by having its corporate charter revoked. They're not "too big to fail". They're not providing a valuable product to our economy. They're not America's Last Great Hope at manufacturing or anything like that. They're a rent-seeking parasite on the economy who obviously can never again be trusty with the weaponizable data they collect on everyone who lives here. Cut off its head - sacrifice it on the altar of accountability and justice - and call it done.

      And as we'd lock up a street-level criminal until their trial, Equifax should be imprisoned by having its bank accounts and stock trades frozen immediately. Sure, that means it can't pay its CEO. Yes, it means its employees will break up with it in favor of more upstanding members of society. Yeah, it means it won't be able to pay rent and will probably get evicted. If all that's good enough for Joe Accused Weed Dealer, it's good enough for Equifax Accused Stalker.

      Where are my mod points when I need them?? +1

      --
      You're messin' with my Zen Thing, man.....
    2. Re:I'm up for a corporate death penalty by Anonymous Coward · · Score: 2, Insightful

      Another possibility is to treat them the way American justice treats offenders who commit civil offense 'crimes' like copyright infringement when copying a DVD.

      Each copy can result in fines up to $250,000 because you copied a DVD instead of buying a movie ticket. The Movie company lost their percentage of a theater ticket sale (say about $10.00), so they need to fine you appropriately. Their math says you should pay $250,000 for each $10.00 they lost. Corporations, the Courts, American politicians all agree this is fair and just.

      So we should apply the same standards to equifax. For every $10.00 lost by a member of the public in credit card fraud, higher interest rates because of ruined credit, additional legal fees, lost work and so on, equifax should be fined $250,000.

      Clean and simple. What's sauce for the goose, and so on...

      Start racking up the fines, and equifax might actually start paying attention to security.

      As it is, equifax has very little liability and they are hoping their lobbying efforts will eliminate any liability that does exist.

      We'll be lucky if they are ever held accountable. A few executives may be fined for insider trading, but they'll probably send Martha Stewart to jail before they send anyone who is really responsible.

  9. Equifax Job Posting by Anonymous Coward · · Score: 4, Funny

    Saw this on Monster this morning:

    EQUIFAX (Atlanta GA) is seeking a talented and highly motivated software engineer and security expert to manage the fallout of our recent security breach. Duties will include analyzing failures in security systems, taking the blame for prior failures, and generally being a scapegoat for the breakdown in security that lead to our infamous breach. Contract position is expected to last approximately 3-6 months, or until the end of criminal investigations, whichever is longer. Compensation includes generous exit bonus to compensate for ruining your career.

    Interested candidates must have a BS or MS in Computer Science or equivalent work experience, not that it actually matters.

    1. Re:Equifax Job Posting by Anonymous Coward · · Score: 2, Informative

      The current Chief Security Officer's LinkedIn page indicates undergraduate and graduate degrees in music composition. Wish I were joking.

  10. Good! by plague911 · · Score: 5, Insightful

    Equifax needs to face SEVERE punishment for negligence. Their incompetence impacts everything from personal finance, to national security. Just think what those nasty Russian's will do with the knowledge of exactly which pesky counter intelligence officer is having credit issues.

    1. Re:Good! by swb · · Score: 3, Informative

      I think the reason that nothing serious will come of this is because it only really affects personal finances.

      Some portion of the affected 143M will be victims of credit fraud and their credit scores will decline as a result. They will then end up paying a risk premium to borrow money, when, in fact, they don't represent the actual level of risk they pay a premium for. It's actually an increased level of profit for lenders.

      At the margins, though, I would expect *some* lenders and sellers of financed products to be concerned about this. If a large amount of fraud came out of this, they could suffer writeoffs and potentially reduced sales as already high-risk consumers were pushed out of credit markets. But mostly I would expect the people vulnerable to fraud to be those with credit/identity worth stealing.

      Bottom line, consumers pay and some corner of the lending and sales market experiences added friction and a dip in sales.

    2. Re:Good! by swb · · Score: 2

      I think the credit reporting agencies are a special racket -- their customers are the lenders, lenders who stand to profit when they can charge the highest possible risk premium to borrowers.

      The credit reporting agencies have a moral hazard to increase the incremental perceived risk of borrowers. It makes their risk assessments appear more accurate (lenders only care about borrowers whose incurred risks don't include a risk premium) and allows lenders to charge a higher risk premium to borrowers.

      It's closed system where consumers have little recourse and where lenders and credit reporters can collude to their individual benefit.

    3. Re:Good! by plague911 · · Score: 2

      Do you have a disability that prevents you from noticing tongue-in-cheek terminology? The Russian's were specifically called out at they are one of the few nations capable of doing that sort of sophisticated wet-work .

  11. Get a credit freeze by Torodung · · Score: 3, Informative

    If you aren't involved in credit application activities, get a credit freeze at all three agencies now. Then they will not provide information. Make things difficult for any fraudster.

    You can lift the freeze when you need to.

    Caveat: It costs money, but it's currently free at Equifax (the page is sometimes cratered, however).

    Good luck everyone. And kudos to LifeLock's cracker department (JK).

    1. Re:Get a credit freeze by Anonymous Coward · · Score: 2, Informative

      Get a freeze at all FOUR agencies now. Don't forget Innovis.

  12. Theory- by WolfgangVL · · Score: 4, Interesting

    Tinfoil hattery:

    This beach was state sponsored. Over the next few weeks, American identities will be stolen en-mass, prompting nationwide credit-freeze. Consumers lose trust in the American system of credit/debt as the fraudulently borrowed moneys and goods leave the country before the freeze. People demand companies are punished, and place blame on the money lenders and banks.

    People go back to spending only what they've earned. Retail feels the pinch first. Many go under in the first months. Prices rise, as available supply of goods diminishes (no longer produced on a credit-line, volume drops)

    When the money stops moving around, the financial sector of the US economy withers and dies within weeks.

    The 1% panic. Crisis follows.

    I imagine this is what 21st century warfare looks like.

    --
    You are being ripped off every second of every day, so that advertisers can help rip you off even more tomorrow.
    1. Re:Theory- by nehumanuscrede · · Score: 3, Insightful

      The prudent have already placed a security freeze on their credit with all three credit bureaus to prevent new accounts from being opened up.
      ( You should do this anyway since there is no need to run credit checks very often. Unfreeze when you need to )

      Don't even bother trying to do it online unless you enjoy frustration. Just call them.

              Equifax — 1-800-349-9960
              Experian — 1-888-397-3742
              TransUnion — 1-888-909-8872

      Banks / lenders will simply reissue new cards and / or change account numbers to be on the safe side. $$$ for them, but I suspect they're
      going to recoup those costs and then some in the lawsuit they're gonna hit Equifax with.

      Maybe we should add a user modifiable pin to the SSN for all transactions that require it.
      ( Or, quit using the GD thing since for day to day ID as it was never supposed to be used for such purposes )

      You should probably pull your free credit report from all three agencies asap if you haven't done so already so you have a baseline to work with
      going forward.

  13. A MUST HAPPEN...verify everything. by Christinagirl1 · · Score: 2

    One thing is for sure, from a legal standpoint Equifax and EVERY credit reporting must verify EVERY item on EVERY credit report. Why? Because that cannot prove that the data has not been tampered with for any reason. They need to prove they verified it as well. By law, they have to prove that the data about each of us is in fact true. They can not. If they are permitted to stay in business, they should wipe down to 0 for each of us. New slate. Them too. But, I think they should all be put out of business for security reasons.

  14. Wow, it's worse than first thought by Opportunist · · Score: 2

    The data loss and ID theft seems to have affected the FCC head honchos, too.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  15. Re:Of course,it's the most singificant data break by Koreantoast · · Score: 3, Insightful

    based on the number of records leaked, there's a good 40% chance per top govt exec that their info WAS leaked

    I would add, based on that percentage, not only is there a good chance that top government executives had their information leaked, but its most likely that information was also leaked about their spouses, adult children, parents, siblings, friends, etc. So I think many would take this personally. If you want to be cynical about it, this leak is going to create a lot of headaches for powerful entities like multinational banks, telecoms, and others who relied on Equifax to vet loans and identities and are going to have to deal with large spikes in fraud for years because of the breach. This kind of breach also helps to further undermine confidence in the banking system they are a part of. They may want this to go forward so they can take a chunk out of Equifax's hide as well. Oh, and their and their families, friends, etc. personal data has also been leaked, so they will probably have some personal motivations as well.

  16. Re:Of course,it's the most singificant data break by smccurry · · Score: 2

    I'd say at best, they are in the same database and marked with some special restriction flags.

  17. Re:Of course,it's the most singificant data break by dpilot · · Score: 2

    It's not simply the breach. It's that after the breach, things just kept getting worse.
      - Executives sold a bunch of stock between the breach and the report.
      - The first "Am I affected?" site was horribly constructed from a security point of view, not to mention not being clear about the legalese regarding liability. There were also reports that it was acting like a simple random-response generator - putting in nonsense IDs gave specific answers - with both types of results.
      - The "Freeze my credit" site set up to handle the volume, and the PIN they gave was a simple time-date stamp, easily guessed.

    One of these days, I plan to write to my banking institutions saying that Equifax has failed miserably at their primary job - being secure, and my institutions should not be using such a shoddy business.

    --
    The living have better things to do than to continue hating the dead.
  18. Oh please by ArchieBunker · · Score: 2

    How many bankers did jail time under Obama for the financial mess?

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
    1. Re:Oh please by zifn4b · · Score: 3, Informative

      How many bankers did jail time under Obama for the financial mess?

      The same amount that did under the George W. Bush administration

      --
      We'll make great pets
  19. Re:Of course,it's the most singificant data break by lgw · · Score: 2

    Insider trading is the SEC, not the FTC, right? The SEC actually scares executives and board members, unlike most regulatory bodies.

    --
    Socialism: a lie told by totalitarians and believed by fools.