fandomsecrets | [ SECRET POST #3901 ]

[ SECRET POST #3901 ]

⌈ Secret Post #3901 ⌋

Warning: Some secrets are NOT worksafe and may contain SPOILERS.

01.

__________________________________________________

02.

__________________________________________________

03. http://i.imgur.com/YVM0ZQW.png
[link for nudity/porn (illustrated)]

__________________________________________________

04. [SPOILERS for Tokyo Ghoul]

[Tokyo Ghoul, character is Kureo Mado]

__________________________________________________

05. [SPOILERS for Persona 5]

__________________________________________________

06. [SPOILERS for Defenders]

__________________________________________________

07. [WARNING for non-con maybe? I am not sure]

Notes:

Secrets Left to Post: 00 pages, 00 secrets from Secret Submission Post #557.
Secrets Not Posted: [ 0 - broken links ], [ 0 - not!secrets ], [ 0 - not!fandom ], [ 0 - too big ], [ 0 - repeat ].
Current Secret Submissions Post: here.
Suggestions, comments, and concerns should go here.

Flat | Top-Level Comments Only

So Equifax got hacked. Millions of people’s personal information (including stuff like Social Security Numbers) was probably accessed. The average US adult has something like a 1 out of 2 chance of being affected. (Or higher.)

This also applies to some people in Canada and the UK.

More info about the breach:

https://www.nytimes.com/2017/09/07/business/equifax-cyberattack.html
https://www.cnbc.com/2017/09/07/credit-reporting-firm-equifax-says-cybersecurity-incident-could-potentially-affect-143-million-us-consumers.html
https://techcrunch.com/2017/09/07/equifax-data-leak-could-involve-143-million-consumers/

If you want to (theoretically) check if you were affected:

1. Go to https://www.equifaxsecurity2017.com/enroll/
2. Hit Begin Enrollment
3. Check if you were affected or not. You will get a message saying they think you were affected, they think you were not affected, or to check back later (important note: this site has been reported to give people random/changing answers, so don't assume you're safe even if it tells you so)
4. Enroll or not, but keep in mind this is only free for 1 year and they'll try to charge you afterward, it's only monitoring, and it's by the same company that just got hacked
5. Consider filing a CFPB complaint
https://www.consumerfinance.gov/complaint/

Run a credit check:

1. Go to http://annualcreditreport.com (1 free report every year)
2. Check if you have any cards or loans you don't recognize
3. Start reporting fraud immediately if you do

Consider putting a fraud warning on your credit:

1. Go to https://www.transunion.com/fraud-victim-resource/place-fraud-alert
2. Place Initial Fraud Alert (this will automatically go to the other credit agencies so you only have to do it here)
3. It'll last 90 days, so reapply as necessary if you think you need it

Consider freezing your credit:

People recommend doing this in general for other reasons, but now might be a good time to start if you are not planning to open any new credit cards, home/auto loans, rentals, etc any time soon.

A credit freeze stops people from opening loans with your name/credit (you set up PINs to access your credit, basically) and doesn’t affect your current cards/credit/loans (i.e. you can still use your existing cards)

However it could cost $5-10 to temporarily unfreeze/refreeze every time you open a new credit card or mortgage or other LOC (i.e. car loans, etc) and note that this is NOT complete security - someone could theoretically use your info to try and unfreeze your credit and use it. But chances are/the theory is, if it's frozen, someone might move onto the next easy target instead of you

Equifax — 1-800-349-9960 — https://www.freeze.equifax.com
Experian — 1‑888‑397‑3742 — https://www.experian.com/ncaconline/freeze
TransUnion — 1-888-909-8872 — https://transunion.com/securityfreeze
Innovis — 1-800-540-2505 — https://www.innovis.com/personal/securityFreeze
ChexSystems — 1-800-887-7652 — https://www.chexsystems.com/web/chexsystems/consumerdebit/page/securityfreeze/placefreeze
(Some of these sites may be down - millions of people are trying to access them probably)

More info at https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

More information on what it does: https://krebsonsecurity.com/2015/06/how-i-learned-to-stop-worrying-and-embrace-the-security-freeze/

Also consider a free credit-monitoring service like creditkarma!

I was reading something about how the Equifax enrollment also requires you to sign away any future ability to join a potential class-action lawsuit?

And how about those fucking insider trading guys, huh? And how they apparently want us to believe that the CFO and the head of information security at the company didn't know about the breach when they sold their shares? Those lousy fucks.

They removed that clause I think! IIRC there was no legal basis for it and there was no way they could've enforced it anyway.

And yeah, the "we just found out yesterday!" excuse makes no sense when their site was registered 8/22:
https://www.whois.com/whois/equifaxsecurity2017.com

I hope they get hammered. They covered it up for a month so that they could sell off their stock.

If there were any justice, they'd be in prison for years.

I'm good because, well, I have no assets. But thanks for posting this, it was good to check.

Even with no assets an SSN and identity has value on its own, in theory (and if it's compromised it'll be floating around later on, too)

But sure, no problem! Way too many people haven't even heard this has happened

Even without money to steal, I'd worry about people opening lines of credit or getting loans in my name.

Frick, I was possibly compromised. My capital one account tracks my credit, would that make me aware of any new credit cards and such?

Sorry, I'm not sure how the Capital One thing works, I don't bank with them

I'd try something like creditkarma anyway, it's free and they list all the cards and loans you have so you can double-check

I'll check out my capital one to check. If not, I'll do all that tomorrow. :(

this site has been reported to give people random/changing answers, so don't assume you're safe even if it tells you so

That sounds pretty useless, since it could also mean you weren't compromised even if it says you were.

Yeah, Equifax is not too great at all this tech stuff (as has been proven)

I have heard theories that the site might just be them trying to stall people while all this blows up

It says that I was maybe compromised? am I fucked?

I can't answer that but hopefully not! Chances are nobody's tried to steal your identity yet, but check a credit report if you can to be sure - all the stuff above is more like things to do to try to prevent someone succeeding at that in the future

I checked creditkarma, which I do semi-regularly anyway. No issues so far.

Unfortunately I'm looking into credit freezing (since I don't need my credit score right now anyway), and in my state it's 10 dollars each to the three main agencies to freeze the credit score. OK, I can cough up $30 if I must, although it doesn't seem like it should cost me anything!!

But the real issue is that they want a copy of my driver's license and a current bill as well as ALL my info and social security number mailed to them. Which they won't return "for my security." :/

Basically, I'm concerned about trusting even MORE information to these people. Even if the other 2 main agencies aren't compromised (and no guarantees after this happened), I don't REALLY want to sent Equifax more of my info. Because I never signed up with them in the first place, I would just be putting more info into their clearly-not-quite-capable hands.

Honestly, I'm starting to wish I"d never gotten a credit card in the first place.

Try the 90-day fraud alert, that one is free. It won't stop anyone but it will make them call you to check if it's you (plus they have all your information already anyway)

Oh! But this isn't about credit cards, anyone with a Social Security number can theoretically be exploited to open a card, even if they've just turned 18 and have no previous cards to their name. So don't worry about having and using CCs, it's the identity part that's important

Edited 2017-09-09 01:04 (UTC)

Well, when I first went to open a credit card about 18 months ago I apparently "didn't exist" and had to get a special secured credit card (the kind you pay money into to build your credit score). So, yeah, I'm gonna go with "if I hadn't gotten a credit card, they wouldn't have my SSN in their system today."

Huh, that's interesting, they have people on record a lot of the time. I guess you're right in your instance!

I just didn't want anybody to get the idea that credit cards are dangerous since they're usually already in the system if they've had other loans of any kind even without a card (like student loans)

I never had any higher education, so maybe that's why. And I avoided credit cards for the first 30+ years of my life, because of the issues my parents had with them. Picked a heck of a time to change my mind but I thought i'd need a credit score for buying a house. (Turns out, I didn't.)

I'll probably see if I can do the Fraud Alert thing sometime, but right now the site is down from too much traffic. Thanks though.

Re: Equifax: collapsing this for length!

case - 2017-09-09 01:50 (UTC) - Expand

Thanks for all, Case, you rock. What a mess.

I hope everything will be ok for everybody but supposedly people have already started being like "oh so THAT'S why I had 3 random cards I've never seen before show up last month" so things are definitely happening. :(

On the bright side maybe it'll kick the government into realizing cybersecurity is a big damn deal and serious consequences for the negligence will happen? Maybe?

We can only freakin' hope, but the current administration is a chicken with it's head not only off, but stuffed up it's ass, so......

You know, that makes me wonder, do you think the hackers got Trump's information?

Re: Equifax: collapsing this for length!

tabaqui - 2017-09-09 02:02 (UTC) - Expand

Re: Equifax: collapsing this for length!

(Anonymous) - 2017-09-09 02:22 (UTC) - Expand

Flat | Top-Level Comments Only