Posts Tagged: ‘credit freeze’

Scam of the day – May 18, 2013 – Washington State Administrative Office of the Courts hacked

May 18, 2013 Posted by Steven Weisman, Esq.

In just the latest installment of a state or federal agency having its records hacked, the Washington State Administrative Office of the Courts recently disclosed that months earlier its website was hacked and that as many as 160,000 Social Security numbers and a million driver’s license numbers may have been stolen.  Although the hacking occurred in the Fall of 2012 and the Winter of 2013, the breach of data security was only confirmed by state officials in April.  The breach was traced, as it often is, to a software flaw.  In this case the flaw was with and Adobe software system called ColdFusion.  Adobe has created a security patch to resolve the problem, but for the victims of the hacking, this is of little consolation.

TIPS

If you have had any dealings with the Washington State Administrative Office of the Courts, you should contact them to see if your information may have been among the information stolen.  If so, you should put a credit freeze on your credit report to stop access to your credit report without your expressed direction.  You can find information about how to put on a credit freeze in the list of scam topics on Scamicide as well as in the archives of Scamicide.  You should also monitor all your financial accounts closely for early indications of identity theft.  You can get additional information as to how to protect yourself from identity theft in my book “50 Ways to Protect Your Identity in a Digital Age” which can be ordered from Amazon at a great price by clicking on the picture of the book on the right hand side of the front page of this blog.

Scam of the day – April 9, 2013 – Hospital identity theft

April 8, 2013 Posted by Steven Weisman, Esq.

A few days ago officials at a Jacksonville, Florida hospital, the Shands Brentwood Primary Care Center warned more than a thousand patients that they are in danger of identity theft due to the stealing of their personal information by an employee at the hospital.  An investigation discovered that health records including the names, addresses, Social security numbers, dates of birth service locations and medical record numbers of 1,025 patients had been stolen by a former employee.  This information puts these patients in serious danger of identity theft and, in some cases, may already have been used to file false income tax returns.  In addition, the victims are also in danger of the serious risks that come with medical identity theft where someone’s medical insurance information is used to provide medical services to someone else.   This can result in a contaminating of the medical records of the identity theft victim, such that false medical information about the patient may appear on his or her records with the risk of receiving improper care, such as a blood transfusion of the wrong blood type.

TIPS

This case once again highlights that no matter how well you protect your personal information, your security is only as strong as the security in the weakest place that holds your information.  Whenever you provide personal information to anyone, company or agency you should inquire as to what security precautions they take to preserve the privacy and security of your information.  It also illustrates the importance of being proactive in preventing harm from identity theft by taking actions such as having a credit freeze on your credit report.  Information about credit freezes, income tax identity theft and medical identity theft can be found elsewhere in this blog and also in more detail in my book “50 Ways to Protect Your Identity in a Digital Age” which can be purchased from Amazon by merely clicking on the link on this blog.

Scam of the day – January 3, 2013 – Maryland child identity theft law

January 3, 2013 Posted by Steven Weisman, Esq.

It is always a pleasure for me when I can report to you about something positive in the world of identity theft and scams.  Today is one of those days.  A new law in Maryland became effective two days ago that is the first of its kind in the country and, hopefully, will be a model for the rest of the states.  The new law will permit parents of children under the age of sixteen to freeze their children’s credit reports with the major credit reporting agencies, Equifax, TransUnion and Experian.   This is important because in recent years, children have been a prime target of identity thieves who, if they are able to get identifying information on a child such as the child’s Social Security number, can open a credit report on behalf of the child and obtain credit in the child’s name.  The identity thief never pays back the money accessed through the child’s credit and the child is burdened with a bad credit report that can have a deleterious effect on the child when he or she applies for credit, applies for a job, applies for a scholarship or applies for an apartment.  Presently the major credit reporting agencies have not permitted credit reports to be frozen until their is an active credit report.  In the circumstances of a child, this would occur only after the child’s credit had been accessed and abused so it truly would be closing the barn door after the horses are out.

TIPS

Credit freezes are a great way to protect yourself from identity theft even in the event that someone has access to your Social Security number.  You can find out more about credit freezes in my book “50 Ways to Protect Your Identity in a Digital Age.”  You can also find the laws about credit freezes in your own particular state by going to this link:   http://www.consumersunion.org/campaigns/learn_more/003484indiv.html

CREDIT FREEZE

November 9, 2012 Posted by Steven Weisman, Esq.

A credit freeze is, as the name implies, a freezing of your credit report at your request whereby no one can have access to your credit report even if they have your Social ecurity number and other personal information about you.  You control access to the credit report through a special PIN that you choose.   Thus, even if someone was able to steal your Social Security number, they could not parlay that into accesss to your cerdit report to be  able to purchase things or set up accounts using your name.  If you need to thaw out your credit report at such times as you want to apply for credit, it is an easy procedure to do so using your PIN; then, after your new credit has been established, you can freeze your cerdit report again.

Having your credit frozen will not affect your ability to get your annual free credit reports from each of the three major credit-reporting agencies Equifax, Experian and TransUnion

The laws pertaining to credit freezes differ from state to state.  For detailed instructions and information about how to freeze your credit in your particular state click on the following link https://help.equifax.com/app/answers/detail/a_id/75/~/security-freeze-fees-and-requirements

Scam of the day – November 8, 2012 – South Carolina data breach update

November 8, 2012 Posted by Steven Weisman, Esq.

As I first reported to you on October 31st, foreign hackers succeeded in stealing the computer records of 3.6 million South Carolina citizens from the South Carolina Department of Revenue.  These records contained a treasure trove of information for identity thieves including names, Social Security numbers, credit card numbers and debit card numbers.  What is particularly troubling about this data breach is that we have heard this all before.  Last year Social Security numbers of 3.5 million Texans were mistakenly disclosed to the public by a government employee.  In 2006 a lost laptop of a Veterans Adminsitration employee contained personal data of 26.5 million veterans that could have been used for identity theft and these are just a few of the instances of either accidental or purposeful data security breaches.  What is most troubling is that with the execption of some of the credit card numbers and debit card numbers in the most recent South Carolina hacking, none of the rest of the information in all of these instances were encrypted which would have protected the privacy of the individuals even if the system’s security had been breached.

TIPS

This is not just a South Carolina problem.  It is a problem with every company, state agency or federal agency that holds your personal information.  You are only as safe as the weakest place that holds your personal information.  The key then is to ask of any company or institution that holds your information, do they encrypt this information and if not, why not.  When it comes to state or federal agencies, a call to your state and federal legislators might also bring this problem to their attention.  Meanwhile, as I have discussed in the past, you may wish to have a credit freeze on your credit report so that even if your Social Security number falls into the wrong hands, it cannot be used to purchase expensive items because your credit report is locked and can only be unlocked through the use of your private PIN.

Scam of the day – October 31, 2012 – South Carolina Department of Revenue hacked

October 31, 2012 Posted by Steven Weisman, Esq.

Recently,  South Carolina Governor Nikki R. Haley disclosed that a hacker based outside of the United States had hacked into the South Carolina Department of Revenue Computers and that data including Social Security numbers, credit card numbers and debit card numbers on 387,000 people was stolen thereby putting these people in serious jeopardy of identity theft.  South Carolina officials did say, however, that only 16,000 of the stolen credit card numbers were not encrypted, however, the theft of the hundreds of thousands of Social Security numbers alone would place these individuals in serious danger of identity theft.  Once an identity thief has your credit card or debit card number, the identity thief can get access to your credit card or bank account respectively and with a Social Security number the identity thief could get access to your credit report thereby enabling the identity thief to use your identity and credit for large purchases.

TIPS

No matter how good you are at protecting your personal data, you are only as safe as the entity with the weakest security that holds your personal data.  It is for this reason that you should limit as much as possible how much information you provide the people with whom you do business.  Your doctor, for instance, does not need your Social Security number as an identifying number.  You should always check your credit card statement and bank account statement monthly to make sure that there are no unauthorized charges and if you find any, report them immediately to avoid liability.  Finally, you should consider putting a credit freeze on yoru credit report so that even if your personal data is stolen, the identity thief cannot get access to your credit report.  You can find more information about credit freezes elsewhere on scamicide.

Scam of the day – August 16, 2012 – Voter survey scam

August 16, 2012 Posted by Steven Weisman, Esq.

Political candidates derive much of their strategy from the information they obtain from telephone surveys so it is not surprising that you may receive a telephone call from a company taking a survey on behalf of a particular candidate.  Even if you are on the federal do-not-call list, the law permits you to receive these kinds of calls.  Scam artists and identity thieves are aware of this and will call you posing as legitimate poll takers.  They will then tell you that in return for taking their poll, you are eligible for a prize and in order to be eligible for the prize, you must provide them with some personal information such as your Social Security number or your bank account number.  Unfortunately, there are no prizes for participating in such surveys and if you provide this information, you will become a victim of identity theft.

TIPS
Legitimate political poll takers never offer prizes for participation in their polls so if one is offered, you know it is a scam.  As I have repeatedly said, never give your personal information, such as your Social Security number to anyone whom you have not called and are sure of their identity and their need for the information.  Finally, as I have indicated before, you may wish to place a credit freeze on your credit report so that even if your Social Security number is stolen, the identity thief will not be able to get access to your credit report to make large purchases in your name.

Scam of the day – August 15, 2012 – Voter registration scam

August 15, 2012 Posted by Steven Weisman, Esq.

With the presidential election season in high gear, it is not surprising that identity thieves and scam artists are taking advantage of this to scam people out of their money.  One of the more common identity theft schemes involves a call from your city or town clerk verifying your registration as a voter.  In order to do this, you are told that you need to provide your Social Security number.  Once you have done this, you have handed the identity theft all he or she needs to steal your identity and obtain credit in your name.

TIPS

Never give your Social Security number to anyone whom you have not called and does not absolutely need it.  Your city or town clerk will never call you to confirm your Social Security number for purposes of verifying your voter registration.  If you have a question about your voter registration, contact directly your city or town clerk at a telephone number that you know is correct.  You also may wish to put a credit freeze, which is described elsewhere in this website/blog on your credit report to prevent access to your credit report and your credit even if someone is able to get your Social Security number.

Scam of the day – August 1, 2012 – Data breach at the Wisconsin Department of Revenue

August 1, 2012 Posted by Steven Weisman, Esq.

For the fourth time in the last six years, the Wisconsin Department of Revenue has negligently released personal information on Wisconsin taxpayers putting them at serious risk of identity theft.  This time the Wisconsin DOR put up on its website a report of real estate property sales from 2011, but included for all the world to see 110,795 Social Security numbers of people involved in those transactions.  The state is offering free credit monitoring to those people whose Social Security numbers were released, but that is of little consolation when you consider the shoddy information security practices of the Wisconsin Department of Revenue.

TIPS

The Wisconsin Department of Revenue is not the only transgressor when it comes to inadqeuate data security and unfortunately, your own personal security is only as safe as the  company or agency that holds your data with the weakest security measures in place.  The best place to look for a helping hand is at the end of your own arm so you should proactively consider protecting your credit report with a credit freeze so that even if someone obtains your Social Security number they cannot get access to your credit report for a large purchase.  You should also limit the places to which you give your personal information as much as possible and always inquire as to their security practices.

Scam of the day – July 21, 2012 – LinkedIn class action

July 21, 2012 Posted by Steven Weisman, Esq.

Following up on the “scam of the day” of July 13th which dealt with data breaches at Yahoo, LinkedIn and others, you should be aware of a class action that has been filed in the U.S. District Court for the Northern District of California on behalf of all LinkedIn users.  According to the lawsui,t LinkedIn violated its own user agreement as well as industry standards by not fully encrypting its users’ personal information and by failing to store that information on separate servers from users’ passwords.  Additional allegations of lax security were also made.  I will keep you informed as to the progress of this class action.

TIPS

Don’t merely depend on the companies with which you do business to protect your personal information.  You should do the best you can to keep your information secure online.  Don’t store your credit card numbers on the websites of companies with which you do business online.  Put a credit freeze on your credit report to keep it safe even if a company with your information is hacked.  Don’t give out your Social Security number unless you absolutely must and use different and complex passwords for every company with which you do business online so that if one company is hacked, the identity thief does not have your password for everywhere else.