Skip to main content
Protect Yourself

The Equifax Breach And What You Need To Know

By September 11, 2017No Comments

It seems like a day doesn’t go by without another “breach” story in the news. So much that you might find yourself ignoring them as just another news story.  

But we urge you to NOT ignore this one. Please. 

The Equifax Breach And What You Need To Know

Equifax was breached in May 2017. It looks like hackers used the vulnerability in the Apache STRUTS flaw.  65% of the Fortune 100 companies use STRUTS, so this vulnerability was not unique to Equifax.  

Equifax did not discover the breach until July 2017.  Doing the math, the attackers had at least 3 months in their systems. 

What did they get?

Hopefully, you are sitting down.  If not, you might want to. 

143 Million people are involved in this breach. The attackers were able to obtain: 

  • Social Security Numbers 
  • Dates of Birth 
  • Credit Card Numbers 
  • Driver’s License Numbers 
  • Telephone Numbers 

There are 245,576,909 American’s over the age of 18 (as of the 2016 census). That means 58% of all adult Americans can be breached thanks to one unpatched flaw in Equifax’s system.  

Basically, this is a recipe for identity theft.  And that is why we are writing this blog.    

Watch out for Identity Scams

We will give you some information below on how to freeze your credit but, in the meantime, this is not the only problem. This information is being traded and sold all over the world. This means you, yes you, are now a target for vishing scams, phishing scams, and combo attacks. 

What can you do?

Be careful.  And here are some tips: 

  • DO NOT click any links from emails.  If you get an email, do not copy and paste the link, instead, open your browser and go to the website using a known URL.
  • If someone calls you saying they need ANY PII (personal identifying information) over the phone, DO NOT give them anything. Go to the web, get the legitimate number of that organization, bank, or credit card company, and call them directly.
  • Do not view this as a credit card breach. When your cards are stolen, the company has insurance to make you whole.  This is not the same; if someone steals your identity and opens credit accounts, loans, or other accounts using your info, it can take YEARS to clean that up.
  • Monitor your credit.  NOW BE CAREFUL!!! Equifax is offering FREE monitoring BUT (HUGGGEEEE OLD BUT HERE), if you accept it you sign away your rights to be part of the class-action suit.  That is dirty pool, Equifax, and I hope none of you signed up for that scam.
  • FREEZE Your credit.  Let’s be honest – this is a giant pain in the butt. And it will make things difficult when you want to buy a car etc. BUT you have to think about doing this or someone can be opening accounts in your name as we speak.  The easiest way is to contact each of the major bureaus:
    Equifax: www.freeze.equifax.com
    Experian: experian.com/freeze/center.html
    TransUnion: freeze.transunion.com

After you do this, you will receive a PIN that is needed to use your credit for anything, DO NOT LOSE THIS. Personally, I would consider doing this even for your kids. 

If you are a victim due to this breach and your identity gets used, take action immediately. Cancel your credit cards, change passwords, monitor your credit. Do not wait for them to contact you – you need to take the initiative and move fast.

Stay vigilant. Stay Alert. Stay Safe. 

Leave a Reply

Security Assessment Case Study
Learn more about the importance of a Social Engineering Risk Assessment.
Download Now
Security Assessment Case Study
Learn more about the importance of a Social Engineering Risk Assessment.
Download Now
What Makes Us Different
At Social-Engineer, we pride ourselves on what we do and how we do it. We are a security services provider, focusing on four primary attack vectors. This case study will go through how we can protect your company and what makes us different.
Download Now
What Makes Us Different
At Social-Engineer, we pride ourselves on what we do and how we do it. We are a security services provider, focusing on four primary attack vectors. This case study will go through how we can protect your company and what makes us different.
Download Now
Woman vs Machine
Technology is providing new, more innovative ways to enhance our world. Scientists are constantly developing smarter, faster and more intelligent machines, systems and robots. There is no doubt that each of these has evolved beyond their clockwork origins.
Download Now
Woman vs Machine
Technology is providing new, more innovative ways to enhance our world. Scientists are constantly developing smarter, faster and more intelligent machines, systems and robots. There is no doubt that each of these has evolved beyond their clockwork origins.
Download Now
Vishing and Phishing Must Be Ongoing to Be Effective
Most companies have a security awareness program in one form or another. If they don’t, it should be on the short list of programs to start as soon as possible. In our experience, many of these programs take the form of computer-based training.
Download Now
Vishing and Phishing Must Be Ongoing to Be Effective
Most companies have a security awareness program in one form or another. If they don’t, it should be on the short list of programs to start as soon as possible. In our experience, many of these programs take the form of computer-based training.
Download Now
A Case Study in Vishing
Vishing (voice-based phishing) has been a problem for quite a long time. There are many vendors in the marketplace that offer vishing services. However they tend to use robo-callers or call centers for large volume engagements. If they are using trained humans to make calls, it is likely in very low numbers.
Download Now
A Case Study in Vishing
Vishing (voice-based phishing) has been a problem for quite a long time. There are many vendors in the marketplace that offer vishing services. However they tend to use robo-callers or call centers for large volume engagements. If they are using trained humans to make calls, it is likely in very low numbers.
Download Now
Benefits of a Social-Engineering Risk Assessment Engagement
Your company is important. Indeed, the data you hold for your clients or employees is very valuable and attackers seek to capitalize on that data any way they can. This is where a Social Engineering Risk Assessment (SERA) engagement can help uncover possible vulnerability to attackers.
Download Now
Benefits of a Social-Engineering Risk Assessment Engagement
Your company is important. Indeed, the data you hold for your clients or employees is very valuable and attackers seek to capitalize on that data any way they can. This is where a Social Engineering Risk Assessment (SERA) engagement can help uncover possible vulnerability to attackers.
Download Now
The Business Value of the Social-Engineer Phishing Service
Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an organization’s employees as the first point of entry. According to the 2021 Verizon DBIR report, of the 3,841 security breaches reported using social engineering, phishing was the key vector for over 80% of them.
Download Now
The Business Value of the Social-Engineer Phishing Service
Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an organization’s employees as the first point of entry. According to the 2021 Verizon DBIR report, of the 3,841 security breaches reported using social engineering, phishing was the key vector for over 80% of them.
Download Now