Thread:
I’m reading the class action suit against @Equifax and this is the most cybersecurity negligence I’ve seen in my career.
They shouldn’t be trusted to plan a BIRTHDAY PARTY, much less control all our consumer credit information.
Let’s look through the lawsuit.
I’m reading the class action suit against @Equifax and this is the most cybersecurity negligence I’ve seen in my career.
They shouldn’t be trusted to plan a BIRTHDAY PARTY, much less control all our consumer credit information.
Let’s look through the lawsuit.
2/ Want to know @equifax’s Super Secret admin login?
It was “admin”
And the password?
Also “admin”
They knew it was a “surefire way to get hacked,” and did nothing. These people should be in jail because this is criminal negligence.
It was “admin”
And the password?
Also “admin”
They knew it was a “surefire way to get hacked,” and did nothing. These people should be in jail because this is criminal negligence.
3/ @Equifax STORED YOUR DATA IN PLAINTEXT on PUBLIC FACING SERVERS.
This would be like your bank storing your money on their porch.
In a really bad neighborhood. With a sign blinking “free money here!”
This would be like your bank storing your money on their porch.
In a really bad neighborhood. With a sign blinking “free money here!”
4/ Want to know @Equifax’s super secret password for stealing their employees tax information?
Use the last 4 digits of their SSN, and the four digits of their birth year.
Use the last 4 digits of their SSN, and the four digits of their birth year.
5/ @equifax didn’t even encrypt your information as it sent it over the internet!
And mind bogglingly, they did not bother to AUTHENTICATE USERS - meaning you didn’t even need a password in many instances. Just poof! It’s available.
And mind bogglingly, they did not bother to AUTHENTICATE USERS - meaning you didn’t even need a password in many instances. Just poof! It’s available.
6/ You will pay massively for @equifax’s actions in the form of credit card theft, ID theft and getting doxed.
Send me to Congress, and I will make sure people this reckless with your data get sued out of existence. How no one went to jail for this is beyond me.
Send me to Congress, and I will make sure people this reckless with your data get sued out of existence. How no one went to jail for this is beyond me.
