Thread by @gdbassett

Heh. meeting cancelled. now back to it.

Mr Sarbanes: Could someone under 18 be breached?
Mr Smith: Know knowledge <18, no credit compromised.

Mr Carter: What do you know about the attackers?
Mr Smith: FBI engaged this week & they're doing it. Not disclosing what we know.

Mr Carter: "Cyber security is hard. It's way above my pay grade. I know that."

Mr Smith: I'd like the country to think about the SSN as private & secure & think beyond that. What's a better way to identify consumers.

Mr Smith: Your SSN, DoB, and Name is no longer a good way to identify people.

Mrs Eshoo: Privacy is in our DNA. People feel helpless to prevent it's loss.

Mrs Eshoo: I've asked CEOs in Silicon Valley that 2 reasons for breaches:
1. lack of hygiene in systems
2. poor security management

Mrs Eshoo: <conflates CERT vulnerability notice and Equifax being notified of a breach by DHS>

Ms Schakowsky: What if I want to opt out of Equifax, can I do that?
Mr Smith: That requires a broader credit reporting discussion.

Smith: That data comes from furnishers.
Schakowsky: Exactly. Most Americans don't know how much data you have and never said it was ok.

Mr Latta: 10 day delay between finding out about stolen info & developing remediation plan?
Mr Smith: We worked around the clock for 10 days

<And that's it>

(media in hall)
Ms Schakowsky: Time is ripe for legislation around this.

Ms Schakowsky: Equifax made it pretty clear they take no responsibility for breach consequences or making consumers whole.

Ms Schakowsky: They collect all of our data and then _we_ have to pay.

<Ms Schakowsky is *not* impressed by 1 yr free monitoring>

Ms Schakowsky is concerned about timeline of breach.

Q: What will legislation do if the PII's already out there.
Ms Schakowsky: They need to offer us better solutions.

Ok, feed cut out so that's the real end I suppose.