EQUIFAX DATA BREACH PATCH
EQUIFAX DATA BREACH LICENSE
EQUIFAX DATA BREACH PROFESSIONAL

EQUIFAX DATA BREACH PROFESSIONAL

As a reference point, the attack on professional networking site LinkedIn occurred in 2012 yet passwords and other personal data stemming from that breach was not made available for sale until years later. Because attackers always have the advantage, victims of this fraud might not even see such attacks until weeks, months, or even years from now.This could include personal identity theft, potential spear-phishing targeting online systems, and ransomware. Extremely lucrative, this data will be bought by enterprising identity thieves seeking a return-on-investment by delivering bespoke and highly efficient attacks on victims.Even if the extortion is not paid by Equifax, Liberty Advisor Group assesses with high confidence that the information will be made available for sale on assorted dark web marketplaces and packaged in micro-segments. It is possible the attackers successfully extort money from Equifax in exchange for allegedly destroying the stolen data and not releasing it publicly. What happens to this data on the Dark Web and how will it be used? The final entry point detail is almost entirely irrelevant to the larger issue highly sensitive data stolen via the most basic of security errors. Some initial speculation revolved around an Apache Struts Web Framework.

EQUIFAX DATA BREACH PATCH

If true, this would suggest that this is yet another high-profile attack that was preventable and avoidable via a simple patch that was not applied despite a published vulnerability. Equifax has not yet officially disclosed how it was successfully attacked, however did indicate that it involved a vulnerability associated with a web application.Total number of those affected could top more than 145 million.

EQUIFAX DATA BREACH LICENSE

They believe it includes much of the sensitive personal information collected about their customers and non-customers alike, to include social security numbers, driver’s license numbers, and troves of other personal and financial information.

Equifax discovered an apparent breach of their system in late July 2017.

Using the data stolen from Equifax, identity thieves can easily perpetuate fraud by impersonating victims during transactions with lenders and creditors. The credit reporting agency, based in Atlanta, is considered by malicious actors to be particularly hack-worthy given its possession of consumer personal and financial information and the reality that these records can routinely fetch hundreds of dollars per record on dark web marketplaces from identity thieves and other fraudsters. It appears to be the third such large-scale cybersecurity event at Equifax since 2015. Compromised data includes Social Security numbers, dates of birth, driver’s license numbers, and other sensitive information, including hundreds of thousands of credit cards, stored on Equifax servers.

Equifax data breach