Join Early Retirement Today
Reply
 
Thread Tools Display Modes
Experian will give away your credit Freeze pin?
Old 09-21-2017, 11:57 AM   #1
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Chuckanut's Avatar
 
Join Date: Aug 2011
Location: West of the Mississippi
Posts: 17,134
Experian will give away your credit Freeze pin?

According to Krebs it does not take much to get your credit freeze pin from Experian.

https://krebsonsecurity.com/2017/09/...it-freeze-pin/

Quote:
The first hurdle for instantly revealing anyone’s freeze PIN is to provide the person’s name, address, date of birth and Social Security number (all data that has been jeopardized in breaches 100 times over — including in the recent Equifax breach — and that is broadly for sale in the cybercrime underground).
After that, one just needs to input an email address to receive the PIN and swear that the information is true and belongs to the submitter. I’m certain this warning would deter all but the bravest of identity thieves!
Quote:
The final authorization check is that Experian asks you to answer four so-called “knowledge-based authentication” or KBA questions. As I have noted in countless stories published here previously, the problem with relying on KBA questions to authenticate consumers online is that so much of the information needed to successfully guess the answers to those multiple-choice questions is now indexed or exposed by search engines, social networks and third-party services online — both criminal and commercial.
YCMTSU!
__________________
Comparison is the thief of joy

The worst decisions are usually made in times of anger and impatience.
Chuckanut is offline   Reply With Quote
Join the #1 Early Retirement and Financial Independence Forum Today - It's Totally Free!

Are you planning to be financially independent as early as possible so you can live life on your own terms? Discuss successful investing strategies, asset allocation models, tax strategies and other related topics in our online forum community. Our members range from young folks just starting their journey to financial independence, military retirees and even multimillionaires. No matter where you fit in you'll find that Early-Retirement.org is a great community to join. Best of all it's totally FREE!

You are currently viewing our boards as a guest so you have limited access to our community. Please take the time to register and you will gain a lot of great new features including; the ability to participate in discussions, network with our members, see fewer ads, upload photographs, create a retirement blog, send private messages and so much, much more!

Old 09-21-2017, 12:38 PM   #2
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
audreyh1's Avatar
 
Join Date: Jan 2006
Location: Rio Grande Valley
Posts: 37,931
You do have to answer some additional questions which takes a little more work, but can be spoofed by researching past addresses and figuring out what car is registered to a person and other public records. A lot of it is silly stuff like current county of residence which is super easy once you have an address.

But to just let any email entered have it emailed? That boggles the mind!!!! They should be treated just like debit card PINs and mailed to the address of record. Unbelievable!
__________________
Retired since summer 1999.
audreyh1 is offline   Reply With Quote
Old 09-21-2017, 07:57 PM   #3
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Chuckanut's Avatar
 
Join Date: Aug 2011
Location: West of the Mississippi
Posts: 17,134
As Krebs has pointed out some of the companies that provide the questions and answers for the so-called Knowledge Based Authorization have been hacked by criminals:

Quote:
One more thing before I move on to the analysis. For more information on why KBA is a woefully ineffective method of stopping fraudsters, see this story from 2013 about how some of the biggest vendors of these KBA questions were all hacked by criminals running an identity theft service online.
Another entry in the YCMTSU file.

YCMTSU = You Can't Make This Stuff Up.
__________________
Comparison is the thief of joy

The worst decisions are usually made in times of anger and impatience.
Chuckanut is offline   Reply With Quote
Old 09-21-2017, 08:53 PM   #4
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
audreyh1's Avatar
 
Join Date: Jan 2006
Location: Rio Grande Valley
Posts: 37,931
Quote:
Originally Posted by Chuckanut View Post
As Krebs has pointed out some of the companies that provide the questions and answers for the so-called Knowledge Based Authorization have been hacked by criminals:



Another entry in the YCMTSU file.

YCMTSU = You Can't Make This Stuff Up.
Yeah - companies are addicted to this knowledge based questions stuff and it's so stupid and easy to guess or quick Googling that it was the cause of huge IRS fraudulent access to personal tax records in 2015, I think, which was then used to efile a huge number of fraudulent returns. The IRS had to shut down online access to tax records for a while 2015 to 2016 to deal with the fallout.

So Experian should know better!

You'd think they would at least take some of the precautions banks do with PINs.

And someone complained that their Equifax security freeze info came in a big envelope with their name, adddress, and "Security Freeze" in big letters on the envelope. Way to go!
__________________
Retired since summer 1999.
audreyh1 is offline   Reply With Quote
Reply

Tags
experian freeze pin


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Chip and PIN credit cards for Europe audreyh1 FIRE and Money 770 02-17-2019 02:18 PM
Denied free credit report AND credit freeze by Experian! ocean view Other topics 21 01-19-2018 11:21 PM
Credit Freeze - Experian Dog FIRE and Money 8 08-01-2016 12:30 PM
T-Mobile / Experian hacked MichaelB Other topics 4 10-03-2015 06:49 AM
Any suggestions ... ( Chip and PIN Credit Card)? wanaberetiree Travel Information 1 04-17-2014 08:48 PM

» Quick Links

 
All times are GMT -6. The time now is 01:25 AM.
 
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2024, vBulletin Solutions, Inc.