Cyber SecurityVideo

What You Should Know About the Equifax Data Breach Settlement

Big-three credit bureau Equifax has reportedly agreed to pay at least $650 million to settle lawsuits stemming from a 2017 breach that let intruders steal personal and financial data on roughly 148 million Americans. Here’s a brief primer that attempts to break down what this settlement means for you, and what it says about the value of your identity.

Q: What happened?

A: If the terms of the settlement are approved by a court, the Federal Trade Commission says Equifax will be required to spend up to $425 million helping consumers who can demonstrate they were financially harmed by the breach. The company also will provide up to 10 years of free credit monitoring to those who had their data exposed.

Q: What about the rest of the money in the settlement?

A: An as-yet undisclosed amount will go to pay lawyers fees for the plaintiffs.

Q: $650 million seems like a lot. Is that some kind of record?

A: If not, it’s pretty close. The New York Times reported earlier today that it was thought to be the largest settlement ever paid by a company over a data breach, but that statement doesn’t appear anywhere in their current story.

Q: Hang on…148 million affected consumers…out of that $425 million pot that comes to just $2.87 per victim, right?

A: That’s one way of looking at it. But as always, the devil is in the details. You won’t see a penny or any other benefit unless you do something about it, and how much you end up costing the company (within certain limits) is up to you.

The Times reports that the proposed settlement assumes that only around seven million people will sign up for their credit monitoring offers. “If more do, Equifax’s costs for providing it could rise meaningfully,” the story observes.

Q: Okay. What can I do?

A: You can visit www.equifaxbreachsettlement.com, although none of this will be official or on offer until a court approves the settlement.

Q: Uh, that doesn’t look like Equifax’s site…

A: Good eyes! It’s not. It’s run by a third party. But we should probably just be grateful for that; given Equifax’s total dumpster fire of a public response to the breach, the company has shown itself incapable of operating (let alone securing) a properly functioning Web site.

Q: What can I get out of this?

A: In a nutshell, affected consumers are eligible to apply for one or more remedies, including:

Free credit monitoring: At least three years of credit monitoring via all three major bureaus simultaneously, including Equifax, Experian and Trans Union. The settlement also envisions up to six more years of single bureau monitoring through Experian. Or, if you don’t want to take advantage of the credit monitoring offers, you can opt instead for a $125 cash payment. You can’t get both.

Reimbursement: …For the time you spent remedying identity theft or misuse of your personal information caused by the breach, or purchasing credit monitoring or credit reports. This is capped at 20 total hours at $25 per hour ($500). Total cash reimbursement payment will not exceed $20,000 per consumer.

Help with ongoing identity theft issues: Up to seven years of “free assisted identity restoration services.” Again, the existing breach settlement page is light on specifics there.

Q: Does this cover my kids/dependents, too?

A: The FTC says if you were a minor in May 2017 (when Equifax first learned of the breach), you are eligible for a total of 18 years of free credit monitoring.

Q: How do I take advantage of any of these?

A: You can’t yet. The settlement has to be approved first. The settlement Web site says to check back again later. In addition to checking the breach settlement site periodically, consumers can sign up with the FTC to receive email updates about this settlement.

Update: The eligibility site is now active, at this link.

The settlement site said consumers also can call 1-833-759-2982 for more information. Press #2 on your phone’s keypad if you want to skip the 1-minute preamble and get straight into the queue to speak with a real person.

KrebsOnSecurity dialed in to ask for more details on the “free assisted identity restoration services,” and the person who took my call said they’d need to have some basic information about me in order to proceed. He said they needed my name, address and phone number to proceed. I gave him a number and a name, and after checking with someone he came back and said the restoration services would be offered by Equifax, but confirmed that affected consumers would still have to apply for it.

He added that the Equifaxbreachsettlement.com site will soon include a feature that lets visitors check to see if they’re eligible, but also confirmed that just checking eligibility won’t entitle one to any of the above benefits: Consumers will still need to file a claim through the site (when it’s available to do so).

ANALYSIS

We’ll see how this unfolds, but I’ll be amazed if anything related to taking advantage of this settlement is painless. I still can’t even get a free copy of my credit report from Equifax, as I’m entitled to under the law for free each year. I’ve even requested a copy by mail, according to their instructions. So far nothing.

But let’s say for the sake of argument that our questioner is basically right — that this settlement breaks down to about $3 worth of flesh extracted from Equifax for each affected person. The thing is, this figure probably is less than what Equifax makes selling your credit history to potential creditors each year.

In a 2017 story about the Equifax breach, I quoted financial fraud expert Avivah Litan saying the credit bureaus make about $1 every time they sell your credit file to a potential creditor (or identity thief posing as you). According to recent stats from the New York Federal Reserve, there were around 145 million hard credit pulls in the fourth quarter of 2018 (it’s not known how many of those were legitimate or desired).

But there is something you can do to stop Equifax and the other bureaus from profiting this way: Freeze your credit files with them.

A security freeze essentially blocks any potential creditors from being able to view or “pull” your credit file, unless you affirmatively unfreeze or thaw your file beforehand. With a freeze in place on your credit file, ID thieves can apply for credit in your name all they want, but they will not succeed in getting new lines of credit in your name because few if any creditors will extend that credit without first being able to gauge how risky it is to loan to you. And it’s now free for all Americans.

This post explains in detail what’s involved in freezing your files; how to place, thaw or remove a freeze; the limitations of a freeze and potential side effects; and alternatives to freezes.

What’s wrong with just using credit monitoring, you might ask? These services do not prevent thieves from using your identity to open new lines of credit, and from damaging your good name for years to come in the process. The most you can hope for is that credit monitoring services will alert you soon after an ID thief does steal your identity.

If past experience is any teacher, anyone with a freeze on their credit file will need to briefly thaw their file at Equifax before successfully signing up for the service when it’s offered. Since a law mandating free freezes across the land went into effect, all three bureaus have made it significantly easier to place and lift security freezes.

Probably too easy, in fact. Especially for people who had freezes in place before Equifax revamped its freeze portal. Those folks were issued a numeric PIN to lift, thaw or remove a freeze, but Equifax no longer lets those users do any of those things online with just the PIN.

These days, that PIN doesn’t play a role in any freeze or thaw process. To create an account at the MyEquifax portal, one need only supply name, address, Social Security number, date of birth, any phone number  (all data points exposed in the Equifax breach, and in any case widely available for sale in the cybercrime underground) and answer 4 multiple-guess questions whose answers are often available in public records or on social media.

And so this is yet another reason why you should freeze your credit: If you don’t sign up as you at MyEquifax, someone else might do it for you.

What else can you do in the meantime? Be wary of any phone calls or emails you didn’t sign up for that invoke this data breach settlement and ask you to provide personal and/or financial information.

And if you haven’t done so lately, go get a free copy of your credit report from annualcreditreport.com; by law all Americans are entitled to a free report from each of the major bureaus annually. You can opt for one report, or all three at once. Either way, make sure to read the report(s) closely and dispute anything that looks amiss.

It has long been my opinion that the big three bureaus are massively stifling innovation and offering consumers so little choice or say in the bargain that’s being made on the backs of their hard work, integrity and honesty. The real question is, if someone or something eventually serves to dis-intermediate the big three and throw the doors wide open to competition, what would the net effect for consumers?

Obviously, there is no way to know for sure, but a company that truly offered to pay consumers anywhere near what their data is actually worth would probably wipe these digital dinosaurs from the face of the earth.

That is, if the banks could get on board. After all, the banks and their various fingers are what drive the credit industry. And these giants don’t move very nimbly. They’re massively hard to turn on the simplest changes. And they’re not known for quickly warming to an entirely new model of doing business (i.e. huge cost investments).

My hometown Sen. Mark Warner (D-Va.) seems to suggest the $650 million settlement was about half what it should be.

“Americans don’t choose to have companies like Equifax collecting their data – by the nature of their business models, credit bureaus collect your personal information whether you want them to or not. In light of that, the penalties for failing to secure that data should be appropriately steep. While I’m happy to see that customers who have been harmed as a result of Equifax’s shoddy cybersecurity practices will see some compensation, we need structural reforms and increased oversight of credit reporting agencies in order to make sure that this never happens again.”

Sen. Warner sponsored a bill along with Sen. Elizabeth Warren (D-Ma.) called “The Data Breach Prevention and Compensation Act,” which calls for “robust compensation to consumers for stolen data; mandatory penalties on credit reporting agencies (CRAs) for data breaches; and giving the FTC more direct supervisory authority over data security at CRAs.

“Had the bill been in effect prior to the 2017 Equifax breach, the company would have had to pay at least $1.5 billion for their failure to protect Americans’ personal information,” Warner’s statement concludes.

Update, 4:44 pm: Added statement from Sen. Warner.


Tags:

You can skip to the end and leave a comment. Pinging is currently not allowed.

2 thoughts on “What You Should Know About the Equifax Data Breach Settlement

  • Well, and chinese singles to examine your success while you’re searching for the world. A number of sorts of analysis have proved Chinese drugs’s success in treating a variety of circumstances, from nausea and skin irritability, back pain and others. Relationship again to over 2000 years, it is one of the crucial ancient and traditional strategies of discourse. Use of raw, natural herbs which can be safe and deliver virtually no side effects: Not like modern medications, these methods of remedy use the best of herbs and plants to create medicines which are extraordinarily secure and devoid of any uncomfortable side effects. As medicines help support your ill health, you’ll all the time purchase it no matter its price. These experts will aid you cater to your wholesome spirit by building up the immune system of the bodily construction. Only by inspecting your bodily structure and its symptoms, these consultants will be capable of conduct a therapy routine that’s completely synced with your body. It actually depends upon you the way a lot you’ll spend.

    The reply is determined by the nation to which a person belongs. Every nation has the liberty to observe its unbiased foreign coverage, and this has been displayed within the relation of China and Pakistan. China is constructing ports in Sri Lanka, Nepal and Pakistan to encompass India from all sides complimented by the one belt one highway mission. The answer is kind of clear, “two and two make four.” In South Asia, the Chinese leadership is going forward with the CPEC undertaking which is an enormous concern for India. The United States of America is also supporting its coalition partners in the Asean region to build up stress on the Chinese management not to take any unilateral step. Japan is facing stress from Peoples liberation army navy in the East China Sea of which there is a historical conflict between the two nations courting back to the Japanese invasion during Second World War.

    The East China Sea dispute between is also traditionally a sophisticated issue which dates again to the Japanese invasion of the Chinese language mainland. The issue has heated to virtually chnlove.com review a degree of no return as a result of involvement of a number of nations and claims and counter claims. Similarly, South China Sea is also a extremely complex concern which needs to be resolved by talks solely. American supply of weapons to the breakaway province, Taiwan, can also be been thought of part of the scheme to confront China in the South China Sea and elsewhere. China is among the countries with oldest and richest cultures on the planet and studying mandarin language by on-line lessons is without doubt one of the methods to know and respect what the tradition has to offer. Within the interval of the Republic of China (1912-1949), knots could be seen from modern Chinese language culture without as much intricacy. Many say it displays the “Giant Infant” tradition described by psychologist Wu Zhihong in her acclaimed ebook The giant Child Nation, which examines psychological issues in trendy China brought on by collectivism and blind filial piety.

    Extraordinarily inexpensive in comparison with fashionable medicines: Trendy medicines, as we expertise it is extremely expensive in comparison to traditional ones. With the ringing of the new Year in 2011, dating websites will expertise phenomenal development. India has already began constructing a rival seaport in the Chahbahar metropolis of Iran and even didn’t attend the one belt one road conference held in China this yr. Baozhuzi began courting men from completely different cultural and skilled backgrounds, including men who worked in finance and in music, in late 2021. She revealed that at one level, she went on three dates in a single day. Eniwetok. The Marianas were 3,500 miles from the troops’ departure point, Pearl Harbor. In further to the above techniques, the idea of Guanxi is one other vital system in Chinese culture. The present Chinese language tradition is derived from this ethnic group’s customs. The previous is derived from the teachings of a revered Chinese language philosopher, Confucius and the system teaches that the human nature can only be perfected with constant striving and self cultivation.

    Reply
  • Thus, it is always advisable not to reveal delicate info over dating websites unless and until you are convinced deep underneath your heart that the individual on whom you are revealing interest is from the genuine great deal of interested users. They will not manage disagreements in between the members although these sites authorities reserve the right to keep an eye on members’ conflicts without any commitment. Hence, it is important to sign up just with online dating sites that are credible and popular due to the fact that such sites are running with high standards of security. Getting register with Smooch Membership, we provide you complimentary dating with our countless members included in it. “Much of us fidget satisfying new people, so we might not feel comfy imitating our real, genuine selves on the first date, and even for a while as we’re being familiar with somebody,” says Paige Rechtman, a psychotherapist in New York City.

    Some folks simply want to go out and have a great time, while others are actively looking for a partner. It is not that unusual for folks to be dating numerous people at a time and actually keeping their options open. It is reasonable, simple and a quick mode to understand individuals in your county. Know that it’s totally typical if you get the jitters leading up to dates. Some ultimately arrange to meet face to face; at times causing major relationships, and even marital relationship. 2009 17% married couples meet online. You get the chance to speak with possible date partners to examine them before you actually satisfy them. Are you the fancy dinner date type? The more you develop great relationships in other areas of life, the more likely you are discover them through dating, Rechtman says. Good listening abilities not just reveal your date that you’re really thinking about them, it helps you determine whether the two of you are an excellent fit.

    Today’s social networks motivates us to place on a mask of excellence and just reveal the silver lining of our lives. An uptick in social stress and anxiety may likewise be affecting today’s dating landscape. Today’s asiame review culture offers countless chances for instant gratification. He can’t stop speaking about Joe, the Army Ranger, and his partner. Riad, who hails from the Tunisian capital Tunis, satisfied his wife online in 2012. “I fell for her the minute I saw her,” he remembers, “a genuine coup de foudre”. Sarah, not her genuine name, wishes to stop others going through the exact same experience. Just since I do not like milk that does not indicate that the restaurant i eat in need to stop serving it. Lastly, don’t be mean! If she’s undoubtedly not enthused about the possibility of a hug, do not press it. Do not be afraid to state that intent if your supreme goal is to recognize marital relationship with someone. 1. Always date with objective.

    Take a while to know the person and comprehend his/her intent. Do your finest to take the pressure off and bring tension levels down. Being positive about it is the finest method to make certain it is well-received. “I would suggest that you approach any date, especially the first one, with a clear expectation of what you want, a considerate (but direct) way to interact that, and borders of your own,” says Birkhoff. “Consider concerns that might produce a more significant connection,” states Rechtman. Not to state that anything my granny states isn’t real, she knows her lemon bars and New Jersey chatter. In brief we can state that online dating has been possible only due to the fact that of the evolution of online dating sites. They said victims were typically called through dating sites and befriended by fraudsters before requests for cash were made. Meanwhile, if you stumble upon profiles of guys or females who are searching online dating profiles because they’re wanting a casual date this weekend, respect their credibility and honesty also. In stead, today we have the extremely beneficial online dating services which can offer terrific results As an outcome of this more and more people are drawing on this choice of meeting brand-new people.

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *