4 ms·
When you freeze, they give you a PIN to unlock it. You can't unfreeze with just your hacked data alone. Of course, the PIN is probably in the next column over
by bcarrell 9y ago
When you freeze, they give you a PIN to unlock it. You can't unfreeze with just your hacked data alone. Of course, the PIN is probably in the next column over, so...
- ceejayoz 9y agoThey've almost certainly got a "forgot my PIN" flow, too. Otherwise a forgotten PIN would mean a lifetime loss of access to credit. What do you want to bet it uses stuff like your SSN to verify?
- lightbyte 9y agoFor Equifax, you are exactly right [1]. If you lose your pin you just ask for a new one and provide some basic form of id. [1] https://help.equifax.com/s/article/ka137000000DS9XAAW/What-do-I-do-if-I-lose-my-security-freeze-PIN https://help.equifax.com/s/article/ka137000000DS9XAAW/What-d...
- ceejayoz 9y agoYeesh. > Please provide proof of identification, such as a copy of your driver's license, passport, birth certificate or other proper identification forms. Given that the hack included name, SSN, date of birth, and address, a fake copy of one of these should be incredibly easy to generate. edit: Driver's license numbers were also leaked in some cases. Fun.
- 3JPLW 9y agoEven worse: In a number of states, the DL number is deterministic based upon name and DOB. http://www.highprogrammer.com/alan/numbers/dl_us_shared.html http://www.highprogrammer.com/alan/numbers/dl_us_shared.html
- ConceptJunkie 9y agoI don't know if it's still the case, but Virginia used to your SSN as an ID. There was an opt-out for that, which I exercised about 25-30 years ago, so I don't know if that policy is still in place.