Lax security at Experian

[donheff]

Krebs on Security has an interesting article on security issues at Experian. Identity thieves are simply opening new accounts in your name with SSNs and credit info from the dark web. Experian opens the new account with new password and email. They notify you at the old email that "you" have done so but you can no longer get into your account to intervene. The new guys can then unfreeze your account. Krebs was able to replicate this with his own account at Experian but not at Transunion or Equifax.

I hate the credit bureaus.

 

[Sunset]

Guess the scammers will soon try that at banks and investment firms....

Obviously if a person has an account, they should be denied opening a new one.

 

[aja8888]

I was born too early last Century. If I could have been a scammer I would have not spent so much time getting an engineering degree and working all those years. Nothing like missing the boat!

 

[mrfeh]

This really isn't news. Experian is a horribly run, sleazy outfit. They should not be in the credit reporting business.