Site icon The Punching Bag Post

Congress Acts to Investigate Equifax’s Massive Cybersecurity Leak

<p class&equals;"MsoNormal" style&equals;"text-align&colon; left&semi;" align&equals;"center">On September 7&comma; the credit-monitoring company Equifax announced a cybersecurity breach that potentially impacted 143 million Americans&period;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;It was a painful announcement because of the concern and frustration this incident has created for so many consumers&period; We apologize to everyone affected&period; This is the most humbling moment in our 118-year history&comma;&rdquo&semi; wrote Richard F&period; Smith&comma; CEO of Equifax&comma; in a letter on September 12&period;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Not only was tens of millions of U&period;S&period; resident&rsquo&semi;s personal information compromised&comma; the company is being criticized for waiting six weeks to officially announce the breach&period; &nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;Equifax Security first discovered the intrusion on July 29&period; Understandably&comma; many people are questioning why it took six weeks to report the incident to the public&period; Shortly after discovering the intrusion&comma; we engaged a leading cybersecurity firm to conduct an investigation&comma;&rdquo&semi; wrote Smith&period; &ldquo&semi;At the time&comma; we thought the intrusion was limited&period; The team&comma; working with Equifax Security personnel&comma; devoted thousands of hours during the following weeks to investigate&period;&rdquo&semi;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Smith has assured the public that the Equifax team is &ldquo&semi;doing everything they can&rdquo&semi; and that they are working &ldquo&semi;around the clock&period;&rdquo&semi;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;We took the unprecedented step of offering credit file monitoring and identity theft protection to every U&period;S&period; consumer&period; Every consumer&comma; whether affected or not&comma; has the option of signing up for the services&comma;&rdquo&semi; wrote Smith&period; &ldquo&semi;We are devoting extraordinary resources to make sure this kind of incident doesn&rsquo&semi;t happen again&period; We will make changes and continue to strengthen our defenses against cyber crimes&period; We will make sure every consumer who wants protection has a full package of services&period; And we will continue to update everyone on our progress&period;&rdquo&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">The breach has been deemed as one of the biggest in history due to its size and the sensitive personal data the company has access to&period; Millions of birth dates&comma; social security numbers&comma; and driver license numbers have been collected to run credit reports by Equifax&period; &nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;The firm set up a website allowing individuals to check if their information was potentially compromised&comma; but it requires users to plug in their last name and last six digits of their Social Security numbers&period; That raises the question of why anyone would trust Equifax with even a partial Social Security number at this stage&comma;&rdquo&semi; writes <em style&equals;"mso-bidi-font-style&colon; normal&semi;">LA Times&period;<&sol;em> &nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">With that being said&comma; the massive breach has concerned high-ranking U&period;S&period; lawmakers&period; Last week&comma; House Financial Services Committee Chairman Jeb Hensarling &lpar;R-Tex&period;&rpar;&nbsp&semi;said that his committee is going to hold a hearing on the breach&period;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;This is obviously a very serious and very troubling situation and our committee has already begun preparations for a hearing&comma;&rdquo&semi; said Hensarling in a statement&period; &ldquo&semi;Large-scale security breaches are becoming all too common&period; Every breach leaves consumers exposed and vulnerable to identity theft&comma; fraud and a host of other crimes&comma; and they deserve answers&period;&rdquo&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Another chairman&comma; Greg Walden of the House Energy and Commerce Committee also is planning to hold a hearing about the data breach and has requested a testimony from Smith on October 3&period;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;After receiving an initial briefing from Equifax&comma; I have decided to hold a hearing on the matter so that we can learn what went wrong and what we need to do to better protect consumers from serious breaches like this in the future&comma;&&num;8221&semi;&nbsp&semi;said Walden&period;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;We look forward to hearing directly from Mr&period; Smith on this unprecedented breach that has raised serious questions about the security of consumers&rsquo&semi; personal information&comma;&rdquo&semi;&nbsp&semi;said Walden in a joint statement with Rep&period; Bob Latta&period; &ldquo&semi;We know members on both sides of the aisle appreciate Mr&period; Smith&rsquo&semi;s willingness to come before the committee and explain how our constituents might be impacted and what steps are being taken to rectify this situation&period;&rdquo&semi;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">But wait&comma; there&rsquo&semi;s more&hellip&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Congressman Ted W&period; Lieu &lpar;D-Calif&period;&rpar; wrote a letter to the House Judiciary Committee urging them to further investigate&period; Lieu wants all credit reporting agencies&comma; not just Equifax to share their cybersecurity practices&period;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;Ultimately&comma; consumer credit agencies should be one of our lines of defense against cyber attacks&comma; and it is deeply disturbing whenever a firm that holds such valuable information gets breached&comma;&rdquo&semi; said Lieu&period; &nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Sadly&comma; this isn&rsquo&semi;t the first time Equifax has had a lapse in cybersecurity either&period;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;That suit related to a May 2016 incident in which Equifax&&num;8217&semi;s W-2 Express website had&nbsp&semi;suffered&nbsp&semi;an attack that resulted in the leak of&nbsp&semi;430&comma;000 names&comma; addresses&comma; social security numbers and other personal information of retail firm&nbsp&semi;Kroger&period; Lawyers for the&nbsp&semi;class action plaintiffs argued Equifax had &&num;8220&semi;wilfully ignored known weaknesses in its data security&comma; including prior hacks into its information systems&comma;&rdquo&semi; writes <em style&equals;"mso-bidi-font-style&colon; normal&semi;">Forbes&period;<&sol;em>&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Then in May 2017&comma; Equifax alerted customers of another breach&period;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">&ldquo&semi;As independent cybersecurity reporter Brian Krebs&nbsp&semi;reported&nbsp&semi;in May 2017 an Equifax note to customers that hackers had used personal information to guess personal questions of employees in order to reset the 4-digit PIN given and stolen tax data&period; In its disclosure&comma; Equifax said the unauthorized access to the information occurred between April 17&comma; 2016&comma; and March 29 the following year&comma;&rdquo&semi; writes <em style&equals;"mso-bidi-font-style&colon; normal&semi;">Forbes&period;<&sol;em>&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">Then in January 2017&comma; Equifax confessed that a &ldquo&semi;small number&rdquo&semi; of customers at partner LifeLock had their data leaked&period; &nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">And the list of data leaks by Equifax just goes on and on&hellip&semi;&nbsp&semi;<&sol;p>&NewLine;<p class&equals;"MsoNormal">A<strong style&equals;"mso-bidi-font-weight&colon; normal&semi;">uthor&rsquo&semi;s note&colon; <&sol;strong>This is terrifying&period; Lieu has a point&semi; all credit reporting agencies need to share how they are protecting customer&rsquo&semi;s sensitive personal information&period; With the information Equifax has that now has been leaked&comma; identity theft is bound to happen&period;<span style&equals;"font-family&colon; Georgia&semi; font-size&colon; 13pt&semi;">&nbsp&semi;<&sol;span><&sol;p>&NewLine;

Exit mobile version