Slashdot Mirror


IRS Awards $7 Million Fraud Prevention Contract To Equifax (politico.com)

An anonymous reader quotes a report from Politico: The IRS will pay Equifax $7.25 million to verify taxpayer identities and help prevent fraud under a no-bid contract issued last week, even as lawmakers lash the embattled company about a massive security breach that exposed personal information of as many as 145.5 million Americans. A contract award for Equifax's data services was posted to the Federal Business Opportunities database Sept. 30 -- the final day of the fiscal year. The credit agency will "verify taxpayer identity" and "assist in ongoing identity verification and validations" at the IRS, according to the award. The notice describes the contract as a "sole source order," meaning Equifax is the only company deemed capable of providing the service. It says the order was issued to prevent a lapse in identity checks while officials resolve a dispute over a separate contract. Lawmakers on both sides of the aisle blasted the IRS decision.

115 comments

  1. The IRS just stepped in it.... by Zurkeyon3733 · · Score: 3, Insightful

    Time to Start up a Class Action Against the IRS for ENABLING data compromised companies to perform government contracts involving IDENTITY! Appalling!

    1. Re:The IRS just stepped in it.... by Mitreya · · Score: 1

      Time to Start up a Class Action Against the IRS for ENABLING

      Heheh. We'll be lucky if lawsuit against Equifax gets us a $5 credit off our next credit freeze fee.
      Class Action against IRS will get you many years of free tax audits, though.

    2. Re:The IRS just stepped in it.... by evilRhino · · Score: 1

      The reality of the situation is that the IRS has been chronically underfunded because it suits the owners of the US government to not have anyone competent reviewing their books too closely. The idea that a private company be outsourced such sensitive data is ludicrous, but the IRS will never have the funding to do it in-house properly.

    3. Re:The IRS just stepped in it.... by Anonymous Coward · · Score: 0

      I'm too lazy to log in.
      That is not "the reality of the situation." That's the popular answer. Like "The capital of Kansas is Kansas City," everyone's go-to answer is simply wrong.
      I am a fed and know several IRS employees, current and former.
      MANY IRS staff have permission to telework. The log in from home on their government issued laptop, and then go about their personal business, literally never doing work. They get found out, disciplined via a letter to file, then it continues.
      They also cut funding from customer service -- that goes out the window first. On purpose, so the populace trying to get them on the phone can't and write their congresspeople.

    4. Re:The IRS just stepped in it.... by JohnFen · · Score: 1

      This makes no sense. The IRS only does what Congress tells them to do. If the government wanted the IRS to not look at certain books, they could easily change the law to make that happen. No underfunding required.

    5. Re:The IRS just stepped in it.... by Anonymous Coward · · Score: 0

      they are probably just being awarded contract for support to pull knowledge based answers so when you sign your return or interact with irs they give the multiple choice qurstions like who did you open a credit account with in 2014. they already have the data so no outsourcing required. irs cant do it in house unless they collect and store credit data and they wont be anymore successful at protecting that data

    6. Re:The IRS just stepped in it.... by magarity · · Score: 1

      but the IRS will never have the funding to do it in-house properly.

      Whoa there; in years past the IRS has wasted whopping piles of money on failed IT projects that they don't outsource. The problem is not lack of funding but lack of competence, especially in project management.

    7. Re:The IRS just stepped in it.... by HiThere · · Score: 1

      Are you claiming that Equifax is better? Or just that Equifax doesn't make their mistakes public?

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    8. Re:The IRS just stepped in it.... by magarity · · Score: 1

      I'm claiming that I was replying to someone who said the IRS never has the funding to do IT projects in house.

    9. Re:The IRS just stepped in it.... by k6mfw · · Score: 1

      Something to think about... an accountant friend said IRS like many other agencies are having their budgets cut which means less staff. There was an auditor she has worked with (unlike popular perception many IRS auditors don't shake you down like gang members), occasionally auditor examines the numbers to be sure nothing is extreme. But with congress and the President constantly shaking down many govt agencies, some of the employees get fed up and quit, some retire, there are also early retirement "buy outs" so end result is less staff because they are usually not replaced. A smart young person will see this and think maybe look for some other place to work instead of being abused. IRS will not go away like the EPA but will have less competent people working for them. And result is sloppy operations.

      --
      mfwright@batnet.com
  2. Wait, WHAT? by Anonymous Coward · · Score: 0

    C'mon. Please tell me that this are fake news :-(

    1. Re:Wait, WHAT? by K.+S.+Kyosuke · · Score: 2

      Remember, no bad deed goes unrewarded.

      --
      Ezekiel 23:20
    2. Re:Wait, WHAT? by Anonymous Coward · · Score: 0

      this contract was in the works way before the breach. its probably abig reason they concealed it. if only they could use the breach as a misrepresentation of their qualifications in order to void the contract. one could hope.

    3. Re:Wait, WHAT? by Anonymous Coward · · Score: 0

      There you are spamming amazon affiliate links with yet another fake account, you disgusting fat sexist tube of lard, Christopher Dale Reimer!

      You can be sure I will be watching this fake account too. I know this is you because you told me you were working on your freepass 11 file server and you are so dumb that you can't even masquerade yourself properly.

      Now, I told you I was out of meds last week and you didn't even care to contact me you lazy fucker.

      How many times do I have to express the emergency of the situation??????

      The python click script you wrote for my pheromone revenue stream web site suddenly stopped to work!!!!!!

      You fucking incompetent python script writer!!!

      When it works, I get 4000+ clicks a day on my pheromone revenue stream web site but only 5 or 6 without it!!!!

      Now, it seems like you dont care and that you have abandoned me you heartless fucking pig!

      Bonus:
      Here is a story that creimer told me when convincing me what a hard life he had:

      The tree was him and the tree knot was his butt hole!

      So, his uncle packed his fat ass with lard and with his cock! Not that it makes much of a difference but anyway, there it is!

      Signed:
      The girl that used to love you and now hates you, burn in hell where you belong you sexist pig!

    4. Re:Wait, WHAT? by Anonymous Coward · · Score: 0

      A multi-million-dollar contract

      Ridiculous hyperbole - 7 million dollars is fucking chump change (I believe the term is "hush money," right creimer?). If someone wanted to unjustly enrich their CEO buddies, the contract would be for a lot more than that.

      awarded as a no compete bid

      Because it's considered a sole-source order, which means that Equifax is the only provider with the capability to deliver the service. So... not surprising that they wouldn't open up a full round of bidding on it.

      and on the last day of the fiscal year? Just business as usual.

      As with any large organization, "spend it or lose it" is the rule. If the IRS had ended the year with an extra 7 million unspent in their budget, their allocation for next year would have been reduced by 7 million. It's no wonder that they pushed to get it finalized before the end of the fiscal year.

    5. Re:Wait, WHAT? by Anonymous Coward · · Score: 0

      C.D. Reimer is a renowned Slashdot collaborator, as he puts it himself; "Because of the quality of my posts and my article submissions, I'm a highly rated commentator and moderator."

      But does anybody ever wondered what "C.D." stands for? Well, it stands for Creimy Dumpty of course!

      Creimy Dumpty sat on the wall,
      Creimy Dumpty had a great fall.
      All the king's horses
      And all the king's men
      Couldn't put Creimy Dumpty
      Together again.

      Creimy's siblings video and theme song, very realistic, especially the pants, just like Creimy's:
      https://www.youtube.com/watch?...

      Creimy's real pictures:
      Before the sex change:
      https://ibb.co/cc7Ddw
      After the sex change:
      https://ibb.co/gVad65

      Creimy's "enterprise-level" chair, he talks about it all the time on slashdot:
      http://www.keynamics.com/image...

      Creimy's head, while his supervisor was talking to him, not with him, since it is impossible to do with Creimy:
      https://school.discoveryeducat...

      Creimy acting in educational resource document, he actually confirmed himself on Slashdot that he was handled by Special Education for the Santa Clara County Office of Education! He is really a king Dumpty!:
      http://www.sccoe.org/depts/stu...

    6. Re:Wait, WHAT? by Anonymous Coward · · Score: 0

      Exactly! We, at Special Education for the Santa Clara County Office of Education, couldn't agree more with you!

      For the valuable /. users that might already have read the following, please note that there is an important update.

      IMPORTANT UPDATE:
      Special Education for the Santa Clara County Office of Education has invested money to buy Chris a new chair:
      http://www.keynamics.com/image...

      Information about Christopher Dale Reimer and autistic people:

      Autistic people have obsessions about things normal people don't care. For example, one of our autistic patient went haywire when he realized that there was a penny missing in his pocket change.

      To calm him down, one of our educator pretended to have found it on the floor and gave a penny to him.

      The autistic patient condition went even worse because he realized it wasn't the same penny!

      Chris has an obsession with budgeting every penny. He doesn't understand that most people do not budget to the penny and have a flexible amount they allow for miscellaneous items.

      I am Nancy Guerrero and I am Director of Special Education for the Santa Clara County Office of Education. We use Chris' (a.k.a. creimer,cdreimer) picture in our document because he is the hardest case we have ever had to handle:
      http://www.sccoe.org/depts/stu...

      Our artists were inspired by the low carb diet that Christopher follows scrupulously for the small lunch box and by the picture linked below for the rest. I am sure that you will notice the similarities such as the bump on the side of his chest and more:
      https://ibb.co/gVad65

      Please be easy on Christopher although, I am aware that some of our staff handling Chris post joke comments here and obvoiusly, the Santa Clara County Office of Education disapprove that behavior vehemently:
      https://school.discoveryeducat...

      But it isn't Chris' fault if he is the way he is. We do the best we can do with him and he is partially integrated into society. We try to cure his abnormal need for attention but he is kind of stubborn and won't listen to anybody.

      Thank You dear users,
      -Nancy Guerrero

    7. Re: Wait, WHAT? by Anonymous Coward · · Score: 0

      Thank you Nancy to all your hard work. Creimer is a simple child,'with simple needs.

      Such a simple child.

  3. Swamp by Anonymous Coward · · Score: 0

    Swamp still stinks

    1. Re:Swamp by The-Ixian · · Score: 4, Funny

      Someone should really drain that thing and build a castle...

      --
      My eyes reflect the stars and a smile lights up my face.
    2. Re:Swamp by TWX · · Score: 1

      Hell, if anything, the levee isn't draining the swamp, it's actually preventing the natural outflow and turning it into a lake!

      --
      Do not look into laser with remaining eye.
    3. Re: Swamp by Anonymous Coward · · Score: 0

      Kinda like the Bog of Eternal Stench. The stench might be money in this case.

    4. Re:Swamp by Anonymous Coward · · Score: 0

      Swamp still stinks

      That's what happens when you drain the swamp, and refill it with sewage. The devil is in the details, as always. Happens with both sides. With politicians, like inverters, flip what they say to find out what they really mean.

      Nixon: "I am not a crook" (followed by Watergate, Spirow Agnew, etc...)
      Bush Sr: Read my lips, no new taxes (after about two months in office, he subsequently raised existing taxes)
      Clinton: "I did not have sex with that woman." (What?! Oral sex is sex? When did this happen?)
      Obama: If you like your healthcare or doctor, you can keep them. (*unless your insurance company stops offering that plan in your state or stops cooperating with your doctor because they bill insurance too much)
      Cash for Clunkers: Making auto companies profitable again (and all cars and trucks expensive, in some cases more expensive than homes in some areas)
      Affordable Care Act: Making Insurance Companies profitable again
      Protect Internet Freedom Act: Freedom to gouge your customers based on which sites they travel to (did not pass)
      Restoring Internet Freedom Act: (this one is dated May 1st, 2017. Guess above is getting a 2nd chance to go through)
      Trump: I'll drain the swamp (he didn't say what he'd refill it with. The EPA has this policy where if one drains a wetland, one must restore it elsewhere)
      Trump: I'm going to build a wall, and Mexico* will pay for it (*By Mexico, I mean Mexicans and other citizens living in the US)
      Trump: I'm going to give a tax cut* to the deserving workers+ in America, and cut out loopholes that businesses++ are using to exploit the tax code
      *cut: (see 'deserving workers')
      +deserving workers: Translation - "Job Creators"
      ++businesses: Translation - (self employed or small business owners)

    5. Re:Swamp by Anonymous Coward · · Score: 0

      Hell, if anything, the levee isn't draining the swamp, it's actually preventing the natural outflow and turning it into a lake!

      I believe the word you are looking for is "cesspool", not "lake".

  4. Don't blame the IRS by Anonymous Coward · · Score: 0

    As much as I like to bash the IRS, they appear to be doing what they have to do to keep things moving. If that means cutting a check, then do it and let the politicians and others fight about it later, otherwise NOTHING will happen.

    If the Feds want that money back later, there are means to get it.

    1. Re:Don't blame the IRS by Big+Hairy+Ian · · Score: 3, Interesting

      Also it looks like they didn't have any choice as Equifax laughably appears to be the only company on their approved supplier list for this service

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

    2. Re:Don't blame the IRS by TWX · · Score: 5, Informative

      I may agree in other circumstances, but awarding a contract for fraud prevention to what's probably the largest victim of a form of fraud in human history- an entity that is now trying to deflect blame by citing conditions that they themselves created in the first place, is about as stupid as it gets.

      Equifax deserves to have its charter revoked, basically the corporate death penalty, with its assets liquidated and all of the proceeds going to a mitigation fund to attempt to combat the expected identity theft that the public will see in the upcoming years. Its officers should be prosecuted and if the ensuing investigation shows they were willfully negligent, the personal gains they made through those negligent actions should be confiscated through a civil forfeiture process as they're sentenced to jailtime. This is not the company that one awards a no-bid contract to.

      --
      Do not look into laser with remaining eye.
    3. Re:Don't blame the IRS by alvinrod · · Score: 1

      Well with the data leek, I think there are plenty of other people who could now provide the same services. Its just a matter of getting them approved I suppose.

    4. Re:Don't blame the IRS by cayenne8 · · Score: 1

      Also it looks like they didn't have any choice as Equifax laughably appears to be the only company on their approved supplier list for this service

      Aren't there like 3 of these major credit agencies?

      Transunion...and another one.

      I was about to say that the Feds have used Acxiom to clean up data before...but I think they may own Transunion, so, that might be redundant.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    5. Re:Don't blame the IRS by Anonymous Coward · · Score: 0

      Well with the data leek, I think there are plenty of other people who could now provide the same services.

      maybe you can get someone from iron chef to make some data leek soup for you

    6. Re:Don't blame the IRS by Anonymous Coward · · Score: 0

      That depends on how you end up on such "approved" lists, no?

      You have to but scratch the surface and the questions start heaping up. There are at least three large players in this racket, so how come only this company was on the approved list? If this is a different racket, how come this company was in both, and isn't that a conflict of interest in the making? Who is the gatekeeper on this list and how did these shmucks ever get past 'im? What do the IRS think "due diligence" looks like in this playpen? And so on.

      N'mind that the whole system rests on false and broken premises. Much like PKI, only without the cryptography and fewer shady companies to choose from to buy you some "industry standard" "trust".

      Personally, I think the whole thing stinks to high heaven. As in, this is what modern day corruption looks like in otherwise not obviously corrupt western countries: You build it right into the system.

      That works fine until someone does something stupid like build their company out of favour cards and the whole thing comes tumbling down due to lack of competence actually doing even the little you're really supposed to do. I'm really quite amazed at the tenacity the former CEO is digging himself and the company in deeper with, actually. But this is such a large scale it's amazing they could have done all that on their own. Not so: It looks like at least the IRS acted as an enabler.

      I'd bet they weren't the only ones. Who else thought these guys were doing a stellar job?

    7. Re:Don't blame the IRS by Kierthos · · Score: 1

      Experian is the the third big one.

      But depending on any number of things, TransUnion and Experian might not meet some qualification to run this program. But through the magic of government bureaucracy and loopholes, Equifax does.

      Go figure.

      --
      Mr. Hu is not a ninja.
    8. Re:Don't blame the IRS by Anonymous Coward · · Score: 0

      Something that extreme only happens if:

      1) teeming masses of angry people get angry enough to actually go out and do physical, public protesting. Angry online posts don't cut it. And a few token protests don't cut it, either.

      2) A few wealthy first-class citizens are harmed as a direct result of the breach.

      Neither condition has proven true so far, so for now Equifax can expect business as usual.

    9. Re:Don't blame the IRS by Anonymous Coward · · Score: 2, Informative

      Equifax is not actually preventing fraud. I worked a similar project where another government agency was also trying to prevent fraud and abuse, and we used Equifax as a data source specifically to confirm identities. You provide them certain information (first name, last name, date of birth, address, etc. etc.) and they would confirm whether you had the correct person, often filling in the blanks. The agency would then use that information, along with other inputs, to determine whether fraud was being committed.

      The IRS is doing the same thing - given the information available, Equifax will confirm whether the IRS is looking at the correct person. While I agree that Equifax needs to get their house in order or even be completely shut down, the contract awarded does speak to the fact that there are precious few identity providers out there. In fact, this may just go to show how much congress would NOT wish to sign the Equifax death certificate when they have much to lose in the way of services provided by Equifax.

    10. Re:Don't blame the IRS by Anonymous Coward · · Score: 0

      agreed. already posted that. time to wind down the company. don't worry about archiving data or worrying about theft protection. just unplug their data servers from the internet and let the internal postmortem folks and investigators wrap up the failure.

      its a crime scene. disconnect the equifax from the internet to prevent further data corruption and leakage.

    11. Re:Don't blame the IRS by JohnFen · · Score: 1

      otherwise NOTHING will happen.

      Doing nothing would be far preferable to putting a criminally incompetent company in this role.

    12. Re:Don't blame the IRS by Anonymous Coward · · Score: 0

      is that like the info onion?

    13. Re:Don't blame the IRS by JeffOwl · · Score: 1

      But the point is that now the Bad Guys(TM) have all the information Equifax has and therefore using data from Equifax to prevent ID fraud seems kinda dumb.

  5. capable by pD-brane · · Score: 5, Insightful

    Equifax is the only company deemed capable ...

    Since Equifax has shown to be very incapable (of exactly the things they should be capable of), what does this say about all other companies in this business?

    1. Re:capable by Anonymous Coward · · Score: 0

      They haven't paid their entry fees yet.

    2. Re:capable by DarkOx · · Score: 1

      Equifax is the only company deemed capable ...

      In other news IRS procurement and partner evaluation procedures revealed to be incapable.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    3. Re:capable by EndlessNameless · · Score: 2

      Usually, being "deemed capable" implies being able to deliver a specific product or service in the exact manner that the requesting agency wants it.

      TransUnion and Experian may be better on any number of metrics, but if they cannot check off all the requirements then they are eliminated from consideration.

      That said, now would be a great time for those competitors to force the IRS to review its requirements. Half of the time, those important "sole source" contracts have a few bullshit requirements just to guarantee that some fly-by-night company can't come in and win.

      --

      ---
      According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
  6. The Art Of The Deal by Anonymous Coward · · Score: 0

    Equifax has learned the art from President Trump himself while attending Trump University. Grab em by the pussy, I say!

    I hope they got some free Trump steaks with the deal, too.

  7. Sole Source by BKuhl · · Score: 5, Funny

    Why is it a "sole source orderâoe? We have verified at least a few other parties have access to all the same data now....

  8. No worries... by seven+of+five · · Score: 2

    Their CEO and Chief Security Officer resigned, so the problem's fixed...

    1. Re:No worries... by Anonymous Coward · · Score: 0

      Ah yes, the executives. They get their humongous salaries because they have to bear the greatest parachutes.

    2. Re:No worries... by Anonymous Coward · · Score: 0

      he conveniently "retired"

  9. Welcome to the future by Anonymous Coward · · Score: 0

    How's Trumpland feeling now?

    1. Re:Welcome to the future by Anonymous Coward · · Score: 0

      Yes, because of course this was Trump's personal decision, because after all, TFS quote:

      Lawmakers on both sides of the aisle blasted the IRS decision.

      couldn't possibly mean anything other than Trump called the head of the IRS and said "Give all future contracts to Equifax!"

    2. Re:Welcome to the future by Anonymous Coward · · Score: 0

      Meanwhile, the administration is floating methods of getting rid of the bullshit that is the current SSN system.

      DRUMPF ISN'T DOING ANYTHING LOL TWATTER RUSSIA PUSSY GRABBING.

      Derangement syndrome is real. There is no cure, and unfortunately, it's probably not terminal.

  10. It makes perfect sense by Chrisq · · Score: 2

    They will need a good fraud prevention program following the data breach by Equifax ... Oh wait!

    1. Re:It makes perfect sense by bluefoxlucid · · Score: 1

      Yeah well, nobody up there is doing it right.

  11. Not the only ones! by Anonymous Coward · · Score: 0

    Whoever stole their data can do this job, too, and likely a lot better than these criminally stupid assclowns.

    Hire the hackers for this job.

  12. More regulations by Anonymous Coward · · Score: 3, Insightful

    It won't happen. Listen my fellow peasant, we have to just bend over and take it.

    And when we get the letter stating that our taxes have already been filed (probably by some illegal alien using our SSN to get his refund and CTC, EITC, ACTC), WE will be the ones that will have to spend the time filling out forms to prove that we are who we are.

    Then, every tax year, WE will have to provide the documentation stating that we are who we say we are.

    All because businesses are careless with the data they insist on collecting about us. It's no skin off of their asses.

    My wife's neurologist system was broken into and we got the letter stating that the break-in happened and "how they take patient privacy seriously".

    Dumb shits.

    Suck it up! There's nothing else to do!
    We NEED European style privacy laws and regulations because businesses cannot be trusted to take responsibility.

    1. Re:More regulations by Anonymous Coward · · Score: 0

      "We NEED European style privacy laws and regulations because businesses cannot be trusted to take responsibility."

      Unfortunately, they'll subsequently waste considerable resources trying to weasel around and find every little loophole they can, leading to higher prices.

    2. Re:More regulations by Archangel+Michael · · Score: 3, Insightful

      A number is not proof of identity. It is a reference number to help establish that you are who you say you are. Having identifying information, like a Social Security Number is not proof of identity, it simply is a tool in what should be a chain of tools to help one verify (key word) identity.

      People who accept it as "proof" of identity are misusing it, and should be held accountable for that misuse. Any Line of Credit established without enough other evidence is itself evidence of lack of due diligence.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    3. Re:More regulations by HiThere · · Score: 3, Insightful

      The problem is, when someone, say Equifax, collects the "other evidence useful for proof of identity", then they can impersonate you to anyone who don't personally know you. And if they share that information with some other entity, willingly or not, THAT entity can no impersonate you to anyone who doesn't know you.

      We aren't just talking about one piece of information here.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    4. Re: More regulations by Anonymous Coward · · Score: 0

      Your wifeâ(TM)s neurologist will probably get some hefty fines. Healthcare industry is pretty regulated when it comes to data security here in the US. Have a look at HIPPA and the newer HITECH requirements. You can get fined a pretty penny for not keeping up with them.

    5. Re:More regulations by Anonymous Coward · · Score: 0

      I can easily establish that I am me, enough so, that nobody else could be me. I have a full and complete history, that I can actually show, not just recite. Addresses, phone numbers, relatives, work history, friends and so on. I guarantee that a casual theft of information about me cannot reproduce the hard to reproduce evidence. If they want to steal my identity, they could, but it would require a lot of work. Having INFO shouldn't suffice for Identification.

      And just as an FYI, this is why Social Media as a form of web of trust. My online profiles aren't easy to fake.

    6. Re:More regulations by Lost+Race · · Score: 1

      It is a reference number to help establish that you are who you say you are.

      Not quite. It is a reference number to help establish who you say you are. You need something else, like a secret or some unique biometric, to help establish who you are.

    7. Re:More regulations by Zurkeyon3733 · · Score: 1

      We don't need anything from EUROPEAN law. Period. You might WANT that. But we don't NEED it. Simply extend the protections of the Constitution to include protecting us from US Corporations (eg. Extend freedom of speech to EVERY speech focused platform), and bar the IRS from searches of persons or private info without a warrant. Including Financials... as it should be that way already. (With a requirement for a GOOD case of Probable...) They currently perform a warrant-less, suspicion-less search of your personal information EVERY time they audit someone. Basically, make the Supreme Court recognize that this is, and always has been, Illegal. Problem Solved.

    8. Re: More regulations by Anonymous Coward · · Score: 0

      HIPAA not HIPPA

  13. This makes perfect sense! by Anonymous Coward · · Score: 0

    If anyone understands fraud, it's Equifax!

    capcha: lawless.

  14. Re-open the bidding by mwvdlee · · Score: 4, Funny

    [quote]The notice describes the contract as a "sole source order," meaning Equifax is the only company deemed capable of providing the service[/quote]
    While that may have been true at the time of posting the order, pretty much every company has access to the same data as Equifax now.

    --
    Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    1. Re:Re-open the bidding by gtall · · Score: 1

      "every company has access to the same data as Equifax now" How do you figure? Do we know who exploited Equifax's alleged security? If it is the Chinese government, it would akin to an act of war to sell that information if the U.S. ever cottoned on to it.

    2. Re:Re-open the bidding by EndlessNameless · · Score: 1

      If Equifax is proving identity verification services, it's not just about the data.

      There is some complicated process by which the government requests identity verification. There are two things that make this process complicated:

      1. It complies with absolutely every federal privacy rule---because no bureaucrat is going to risk his job on something that does not comply with the law. The rules may or may not actually protect us, but they will be followed regardless.

      2. It interfaces with some arcane government IT system. So there is a painful accreditation process before it is allowed to communicate, and it is probably an enormous pain to support once it is working. It is entirely possible that their competitors saw the list of requirements and said, "Fuck it."

      If TransUnion or Experian cannot claim compliance with every regulation and support whatever bizarre IT nightmare the IRS has, then it doesn't matter what data they have.

      --

      ---
      According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
    3. Re:Re-open the bidding by Anonymous Coward · · Score: 0

      "every company has access to the same data as Equifax now" How do you figure? Do we know who exploited Equifax's alleged security? If it is the Chinese government, it would akin to an act of war to sell that information if the U.S. ever cottoned on to it.

      At this point we very much don't know who has the data and what their copy actually contains.
      All we know is what data was available to be taken, but nothing regarding exactly what was taken, thus the default safe assumption that it was everything.

      There was only one hacking group that claimed credit for the breach, but at this point it appears to be a false claim, so we're back in the dark.

      The group making the claim sent equifax a ransom for deleting the data, of which at least equifax did the right thing here and refused to pay it.
      The claim was that if the ransom was not paid by september 15th they would release publicly everything except the credit card numbers which would be sold off to others separately.
      That date came and went and no public data dump seems to be available anywhere.

      Also the small handful of "example entries" the group offered as proof turned out to be people who have already had their SSNs made public years before via unrelated means.
      Plus an error was pointed out in one of those famous peoples address on file, and the group went back and manually corrected it which heavily implies it was fake to begin with.
      (I can certainly see equifax having a typo or otherwise bad data stored, but if that was the case the hacking group wouldn't have corrected it. A simple reply of "Hmm yes that is strange, but that's what it says in the copy we got" would have been plenty enough)

      Until the data is dumped publicly and someone fairly trust-worthy gives it a once over to verify it is real, or we start to see the data used in some pattern pointing back to the source, we probably will continue to not know.

      The thing is, if it was just a small time hacking group, you'd imagine they would be scared shitless in accidentally exposing who they are by selling or using the data, so in that case it may be some time before the effects are seen.
      If it was a government actor that did it however, if the goal was to destabilize trust in the credit system then they have already succeeded beyond their wildest dreams even without releasing or using the data, so there is the possibility it will never get used further and we may never know.

    4. Re:Re-open the bidding by HiThere · · Score: 1

      An earlier story claimed that the original hacking group passed it on to a different set of hackers when they figured out how valuable it was. I interpreted that as meaning they'd already sold the access, the story figured that was proof it was a nation-state.

      So you can take your pick. Either it's already on the market, or it's in the hands of an unknown nation state...from which it will likely leak (eventually), because it won't hurt their employers, and somebody always needs more money.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  15. European style privacy laws by Anonymous Coward · · Score: 1

    My company is currently spending a lot of money and time to comply with Europe's new General Data Protection Rules whereby any person can request that their information be completely removed for a company's systems. The reason the company is taking it seriously is because the fines for non-compliance are set as a percentage of the company's revenue so they could be massive. Plus no other European company will do business with us unless we're compliant.

    Here in the USA though the moment most people hear "European style" they'll dismiss it as socialist and proudly remind you of how we value our freedoms here like the freedom to have a company compile vast amounts of sensitive data about you or the freedom to go bankrupt from medical bills or the freedom to never be able to afford to retire or the freedom to not be able to afford to go to college or the freedom to have your kids murdered in their classroom.

    1. Re:European style privacy laws by Anonymous Coward · · Score: 0

      don't forget the freedom to have guns no citizen needs.

    2. Re:European style privacy laws by Anonymous Coward · · Score: 0

      > fines for non-compliance are set as a percentage of the company's revenue

      Actually, I believe it's for the company's worldwide turn-over.

    3. Re:European style privacy laws by Gr8Apes · · Score: 0

      Here in the USA though the moment most people hear "European style" they'll dismiss it as socialist and proudly remind you of how we value our freedoms here

      Brainwashing works both ways, as the rest of your comment shows.

      --
      The cesspool just got a check and balance.
    4. Re:European style privacy laws by syn3rg · · Score: 1

      don't forget the freedom to have guns no subject needs.

      FTFY

      --
      The contents of this message have been doubly encrypted by ROT13
    5. Re:European style privacy laws by Zurkeyon3733 · · Score: 1

      Until someone tries to rape or stab you to death and there isn't a cop 2 blocks away... THEN you might think differently... a LOT differently. Gun Grabbers FAIL to think it through. CRIMINALS WILL NEVER DISARM. By you doing so or forcing others to, you simply WEAKEN your chances of survival in an attack. Of ANY kind. When someone bombs a building, you blame the bomber, when someone hijacks a plane, you blame the hijacker, when someone shoots up a concert, you blame the GUN? FFS! Pull your sheeple heads out of your asses! Out of an estimated 220 MILLION guns in America, less than 1000 have EVER been involved in a mass shooting. LET THAT MATH SINK IN!

    6. Re:European style privacy laws by Anonymous Coward · · Score: 0

      The purpose of the 2nd Amendment was to ensure the citizens could be armed against an oppressive government, such as the ones they were leaving in Europe. So by that definition there are no

      guns no citizen needs

      . They need as much fire power as necessary to keep their government under control.

  16. So you fuck up and you get PAID ?! by UnknownSoldier · · Score: 2

    WTF.

    1. Re:So you fuck up and you get PAID ?! by PPH · · Score: 2

      Rule 1 of corporate administration: Heads always roll uphill.

      --
      Have gnu, will travel.
    2. Re:So you fuck up and you get PAID ?! by Anonymous Coward · · Score: 0

      In case you haven't noticed, fucking up royally and ruining companies is now the quickest way to fortune for a CEO in America. Has been for awhile now.

    3. Re:So you fuck up and you get PAID ?! by Anonymous Coward · · Score: 0

      MAGA!

  17. award to equifax just a small contract by Anonymous Coward · · Score: 0

    7 million..prob over 5 years is a very small contract for an org. the size of the IRS

    1. Re:award to equifax just a small contract by JohnFen · · Score: 1

      Personally, I don't care about the amount of the contract. If it were for $100, that would make it no less objectionable.

      The serious problem here is hiring a company who is demonstrably incapable of detecting or preventing fraud in a role of fraud prevention.

    2. Re: award to equifax just a small contract by Anonymous Coward · · Score: 0

      They might as well just hire Maryssa Meyer to turn the company around. I heard she's good at that.

  18. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  19. This IRS calling to check your identity we need yo by Joe_Dragon · · Score: 4, Funny

    This IRS calling to check your identity we need your
    Name
    Address
    SS number or tax ID number

  20. Well, of course! by drinkypoo · · Score: 1

    Equifax just proved that they have the necessary data...

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    1. Re:Well, of course! by Anonymous Coward · · Score: 0

      Equifax just proved that they have the necessary data...

      And shared it with the cooks they will be verifying later... nice.

  21. Re:To be fair... by tomhath · · Score: 1

    The decision was no doubt made weeks ago. The announcement had to be made by Sept. 30 so it was in the right fiscal year budget - use it or lose it.

  22. Draining the swamp by Anonymous Coward · · Score: 0

    Ladies and gentlemen, the swamp has been drained bigly. This is most draining of the swamp ever done by a President. Everyone loves it.

  23. Re:This IRS calling to check your identity we need by Anonymous Coward · · Score: 0

    ...and your bank account number, login and password to deposit your refund.

  24. Awesome! by Anonymous Coward · · Score: 0

    This will make things much easier to own taxpayers

    -signed,
    multiple cracking groups

  25. Government Level Stupidity by zeugma-amp · · Score: 2

    There is a reason we call it "Government Level Stupidity".

    --
    This is an ex-parrot!
  26. Now that's rehabilitation! by Anonymous Coward · · Score: 0

    It's like hiring the Boston Strangler as a kindergartner.

  27. Is it self referential? by Anonymous Coward · · Score: 0

    Will they detect that the award is fraudulent?

  28. In other news... by bryanp · · Score: 2

    The Dept. of Human Services has awarded a contract to a company formed by OJ Simpson, Robert Blake, and Scott Peterson to do research into domestic violence prevention and awareness.

    --
    "An unarmed man can only flee from evil, and evil is not overcome by fleeing from it." Col. Jeff Cooper
  29. gee by bugs2squash · · Score: 1

    you have to wonder what could have happened to make such fraud prevention measures necessary.

    --
    Nullius in verba
  30. Pontius Pilate by Anonymous Coward · · Score: 0

    Wanting plausible deniability for any negative results of their actions has made sense for politicians at least going back to the first few years after BC changed to AD.

    As ACA repeal attempts this year have demonstrated, even the current Republican politicians still fear losing plausible deniability.

    1. Re:Pontius Pilate by JohnFen · · Score: 1

      That's a good point. On the other hand, Congress has historically been very good with telling the IRS to do things that are very unpopular while at the same time blaming and directing the outrage about it at the IRS.

  31. Re:This IRS calling to check your identity we need by Voyager529 · · Score: 1

    This IRS calling to check your identity we need your
    Name
    Address
    SS number or tax ID number

    Hello, IRS agent! It's on the internet now, so by all means, feel free to download it.

  32. Is this another example of "draining the swamp"? by Lost+Penguin · · Score: 1

    I think "swamp" is the alt-rights" code phrase for Treasury....

    We have heard that the government doesn't work, so elect "so and so"; if they get elected, they then break the (previously working) government exactly as they described, and say it never worked.

    --
    I am the unwilling control for my Origin.
  33. Title is backwards by Anonymous Coward · · Score: 0

    Shouldn't it be that Equifax is paying the IRS to validate taxpayer data? Is there some reason the IRS isn't the absolute source for taxpayer data?

  34. What!? by DaMattster · · Score: 1

    Equifax just showed the world their absolute ineptitude and now the IRS wants to give them a contract with sensitive information!? Oh boy! Now I have seen absolutely everything. Lightning may strike me dead because I really and truly can see nothing more.

  35. Let's hear from lovers of taxes by mi · · Score: 1

    Let's hear from the crowd, who like to pay taxes — because that's how they buy civilization .

    They seem kind of quiet today for some reason...

    --
    In Soviet Washington the swamp drains you.
  36. Wrong new site? by Anonymous Coward · · Score: 0

    I'm sorry, is this The Onion?

  37. What's the word? Hmm. by bill.pev · · Score: 1

    So, if I understand correctly, an organization who whose sensitive personal data (on almost every US taxpayer) has been compromised, is now being paid to be the sole source of verification for that very same information. What could go wrong?

    I realize I am at odds with 50% of the American Electorate, but perhaps we need to get specific on who exactly is in this swamp that needs draining. Ajit Pai is cool? Equifax is legit? And people support these positions? WTF.

    I don't know the exact word for state of Anarchy in which The Authority is itself is the source of the chaos and disorder. But, this seems to be current policy doctrine, supported by a large part of the electorate, for God Knows what reason. (Literally.)

  38. Hey that's our money by Anonymous Coward · · Score: 0

    Too bad the IRS doesn't have to use their own money to fund this operation. I have a way better and cheaper alternative. Make it illegal for any company to hold your information, and let the individual provide credit references when they go to open credit. Put the control in the hands of the consumer.

  39. Re: Trust the liberals.... by Anonymous Coward · · Score: 0

    You don't realize that republicans control everything right now right? You guys made this decision. I thought you were going to drain the swamp? Business as usual.

  40. More misleading than fake by tomhath · · Score: 1

    The IRS tried to replace Equifax back in July when it awarded the contract that was competed to another company.

    Equifax was the incumbent and protested the award.

    In order to keep the service available to taxpayers, the IRS awarded Equifax a "bridge contract" until the protest is resolved.

    So the IRS did everything right, the normal red tape prevented it from reacting to the security breach when it happened.

  41. So how much did Equifax by Anonymous Coward · · Score: 0

    paid to be "sole source order"

  42. Car companies, banks, and now... by Anonymous Coward · · Score: 0

    Now they're bailing out a company that profits from predatory lending. We need to let the entire credit 'industry' fall. It preys on people and keeps them working to serve business. Prices will adapt as people begin learning what 'living within your means' really, truly is. All three agencies should be forcefully liquidated and corporate lending abolished.

    Corporations get free lunches from the backs of this country's citizens. Take it back.

  43. This is a natural progression by Anonymous Coward · · Score: 0

    Now that corporations are people, the Peter Principle applies to them, too.

  44. Social Security Administration Uses Equifax Too by Anonymous Coward · · Score: 0
  45. WTF by dcw3 · · Score: 1

    The damned credit agencies can't even get my address right. I've ran 3 agency checks several times over the last few years, and found multiple errors, and yet the government wants to rely on these jackasses? They should be sued into oblivion for not getting their shit straight. I'm currently fighting with one of them over a phony bill from MCI...yes, MCI. I had used them at an old address that I moved away from back in '02, and yet MCI posted that I owe them about $50 as of 2013...eleven years after I no longer had an account with them. I could easily pay off MCI, but am fighting it on principle.

    --
    Just another day in Paradise
  46. DID I WAKE UP IN A PARALLEL UNIVERSE? by Christinagirl1 · · Score: 1

    Did I wake up in a parallel universe? Think of every possible expletive than dream of shoving them up the tail of this huge asses.