Today’s Scam of the day involves yet another major data breach. This time the victim was MoneyGram a popular company with more than 150 million customers that helps you send money electronically to bank accounts or mobile wallets. MoneyGram confirmed earlier this week that it had suffered a data breach that occurred between September 20th and September 22nd, but that the company did not become aware of the data breach until September 27th. It appears that hack occurred when through the use of social engineering a hacker impersonated a MoneyGram employee and contacted MoneyGram’s IT help desk and was able to convince the IT employee to provide access to MoneyGram’s networks.
The compromised data includes names, home addresses, phone numbers, email addresses, birthdays, bank account numbers and, most problematic, Social Security numbers of MoneyGram customers. Armed with your Social Security number, a criminal can make you a victim of costly identity theft quite readily.
So what can you do to protect yourself from these data breaches that will be occurring?
TIPS
One important lesson is to limit the amount of personal information that you provide to companies and websites whenever possible. For example, your doctor doesn’t need your Social Security number for his or her records.
You should make sure that you have a unique password for each of your online accounts so that if one of your passwords is compromised in a data breach, all of your accounts will not be in danger. If your information is compromised in a data breach, you should immediately change the password for that account.
If you have not already done so, set up dual factor authentication for each of you accounts where it is available. This will protect you from having those accounts stolen by someone who may have access to your password. However it should be noted that the malware responsible for this particular data breach is able to bypass password requirements and dual factor authentication.
https://www.transunion.com/credit-freeze
https://www.experian.com/freeze/center.html
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/