One, did YOU check to see if you have been impacted? Most likely you have. Two, the entire thing human error and straight up negligence on their part. This from the company that has info you didn't give them who will ruin your credit for being late with a payment, and or, make it damn near impossible to remove something from your report you didn't cause. People really should be outraged about this.

A few execs in the company stepped down (vs being fired) and and no doubt, left with millions in golden parachute reward for sucking at their jobs. I recommend you PASS this around and let the powers that be (your elected officials will also be directly impacted so probably pissed off) you want a federal investigation and those found guilty, pay the price.

Cliffs: Equifax, and the other credit companies, suck nads

Failure to patch two-month-old bug led to massive Equifax breach

The Equifax breach that exposed sensitive data for as many as 143 million US consumers was accomplished by exploiting a Web application vulnerability that had been patched more than two months earlier, officials with the credit reporting service said Thursday.

"Equifax has been intensely investigating the scope of the intrusion with the assistance of a leading, independent cybersecurity firm to determine what information was accessed and who has been impacted," company officials wrote in an update posted online. "We know that criminals exploited a US website application vulnerability. The vulnerability was Apache Struts CVE-2017-5638. We continue to work with law enforcement as part of our criminal investigation, and have shared indicators of compromise with law enforcement."

The flaw in the Apache Struts framework was fixed on March 6. Three days later, the bug was already under mass attack by hackers who were exploiting the flaw to install rogue applications on Web servers. Five days after that, the exploits showed few signs of letting up. Equifax has said the breach on its site occurred in mid-May, more than two months after the flaw came to light and a patch was available.

Cont:

https://arstechnica.com/information-...month-old-bug/

Have to do some freezing this weekend as a result of that ****.

What's the best thing to do moving forward as far as protection? Enroll in their credit monitoring or something like lifelock?

Impacted bro here. Waiting on those class action dollars. To anyone who has been impacted, be sure not to accept the 1 year free trial of equifax software to moniotor your credit score/data as the EULA has you sign a waiver that says you can't bring a lawsuit against them by using the software.

****ing swine. "we lost 1/2 of all american's data to hackers" "Try our free product for a year (which likely sucks balls), oh and btw you can't sue us if you use this"

Go **** yourselves. I hope Elizabeth Warren manages to bring some kind of case against these execs. Also of note, 2 execs did insider trading after the break was reported internally. These ****s outa hang:

https://www.cnbc.com/2017/09/07/equi...ta-breach.html

Edit: to find out if you're impacted go to this site:https://trustedidpremier.com/eligibi...igibility.html
I'm not a fan of the idea of entering in the last 6 digits of my social to a company that just lost my social, but there is no other way to know if you're impacted.

For those of you who would naturally question the authenticity of the site, lifehacker links out to it here as well:http://lifehacker.com/how-to-find-ou...hac-1806121695

Do not enroll. See my post - you can't benefit from class action suits if you do.

How do I check if I was impacted.

What step by step actions have you guys taken?

I am concerned and just haven't had the time to look into more even though I've read about it numerous times. I need to start my process.

https://trustedidpremier.com/eligibi...igibility.html

just edited my above post to reflect this.

if nobody went to jail for the 2008 financial crisis, nobody will go to jail this time either. Soon it will all be forgotten, sadly..

great, I may have been impacted, now what?

There really are no actions to take other than to verify you've been impacted, then wait for the class actions to play out. If you want to monitor your ****, use a monitor that is not from equifax as they're trying to screw over the people that use their software.

More on this here:http://komonews.com/news/consumer/eq...ration-clauses

sit on your hands and wait for the class action suits to close....maybe 2-5 years down the line. Not much recourse we have here because of our dick-less senators/judicial branch etc.

Man this sucks. Also I've been part of 2 class action lawsuits got like $20 for them fuarck

Too right. Eric Holder was an impotent **** that was on the banks' payroll. In this case however, if you write your senator (lol) maybe it will add more pressure for congress to do something about it.

I think its an easy case to prosecute those 2 execs for insider trading, but negligence with regards to tech would be a damn near impossible case to bring, so this bro is right. Largely no one will be punished, which is ****ing unexcusable.

thanks for the link and repped

should i enroll since i wasn't affected?

whats the class action going to even do? Give us a few fukkin dollars? lol

The lawyers are arguing that each person should be paid the amount which is required to hire a person to clean up their credit/data. This is a pretty arbitrary amount depending on who you ask, so right now, I'm not expecting much.

Edit: more on this here:http://www.wsbtv.com/news/local/clas...each/608791887

"What the money should be is what is necessary to hire someone to straighten out your credit so that you don't disrupt your life forever," he said. "And some money for the fact that (Equifax) negligently, and in violation of several federal statutes, allowed for this information to get out."

Meh, if you're not impacted then by all means.

Pretty sure that changed due all the outrage about it.

Ah, if that is the case, be sure to verify it when you ready the EULA.

I will not be enrolling regardless. If these *******s think I'm going to use a product, which no doubt sources more data from my browsing, cookies etc, They can suck the fat one.

I'm so mother fcking pissed right now, I fcking enrolled then read the above post so you're saying I can't get CAL benefits?

You gotta be ****ing kidding me, fck Equifax hope they choke on a bag of dicks in hell

You might be in luck. Above bro mentioned they pulled the forfeit of CAL verbiage in the EUAL due to outrage over it. I'd go back and read what you just signed bruh to verify.

ive never used their site before but ive used credit karma

could i still have been affected?

Yes-Equifax is a credit score company that existed well before self monitoring services like credit karma existed.

Think of credit karma as the ability to query your credit score (which comes directly from Equifax).

Equifax complies data on your entire life and dictates what your credit score should be. They sell their service to banks for credit checks for loans and such. As such, it doesn't matter what service you use to query your data if the data holder loses half of the entire database to hackers (which is exactly what happened).

There are 2 other companies like Equifax that compile and dictate credit scores. They are Experian and TransUnion. When you apply for a loan, the bank will take an average of all 3 scores from these 3 different company to decide if you should get money or not.

This is why the hack is such a big deal - no one asked these douchers to compile data on your entire life and then lose it. They did it because they saw a market for it, and the market blossomed because banks wanted more info on folks they lend money to. As a company, they have 0 incentive to protect your data, because if they lose it, they don't get hurt, except for the lawsuits. As we all know execs don't go to prison - and you can thank our prior AGs (Eric Holder and Loretta Lynch) for this piss poor way of carrying out "justice."

They say on their website that the class action waivers and arbitration clauses don't apply. They better pepper their angus for the long dick of the justice department if they try to enforce that

so basically the entire u.s. population is at risk even if they didnt use their product

Correct, actually 1/2 of the entire US population, as 153 million unique records were lost. As you may know, with infants and children included, we only have around 300 million people in the US.


Edit: It should be noted, these guys do not wait until you're an adult to start compiling a credit score on you. As soon as you open a bank account, (or even earlier) they begin compiling data on you. So children and adolescents will be impacted by this breach as well.

Well that is at least a shred of good news. The company that ****ed us can't DP us. Hooray.

Looks like I should be good then, I'll just have to freeze my credit I guess.

They are offering one year of protection but the criminals that obtained it can use it 5-10+ years from now.

Guess I won't be surprised if someone uses my **** in the future, and I'll know why.

This is not a bad idea. For those interested in freezing your credit:

https://www.usatoday.com/story/money...ity/657304001/

""A credit freeze prevents creditors from accessing your credit report, according to the Federal Trade Commission. It prevents credit, loans and services from being approved in your name without your consent. It does not affect your credit score. ""

Edit: if you have to buy a house, car, etc. This way forward may not be for you.