5 ms·
They know what parts of their system were compromised, at least partially.
by goialoq 9y ago
They know what parts of their system were compromised, at least partially.
- rgbrenner 9y agoYes, without Equifax, how could anyone know they should apply security patches to their systems? No one knew this until Equifax.
- saurik 9y agoTechnically, it is still only one data point: we should probably run some kind of controlled study to verify that this is actually a problem before we go overboard.
- burkaman 9y agoOk, so why didn't they? Should we ask TransUnion what went wrong at Equifax, and what laws and regulations are needed, if any? Or should we ask Equifax?
- phkahler 9y ago>> Ok, so why didn't they? The parent post was sarcasm. Equifax did not follow security practices that are common and widespread in the industry. And by industry I don't mean credit reporting companies, but companies that have systems connected to the internet.
- burkaman 9y agoI understand that. Why didn't they follow those practices? What can we do to force companies to follow them in the future?
- chii 9y agoMake the liability for data safe keeping in the company that holds the data. You don't see medical records have issues like this, because the laws surrounding it is quite fierce.
- buttcoinslol 9y agoYou force companies to secure data by giving out enormous fines to the company and criminally charging the negligent or incompetent corporate officers.
- rgbrenner 9y agoI will actually answer your question, because Equifax has already explained: One guy was supposed to install the update, but forgot for some reason. Everything was his fault. Did you expect anything else from a company so incompetent? With a paltry $3b/year, they can't be expected to pay for more than one person to install updates.
- deleted 9y ago[deleted]
- beager 9y agoSure, but just because you got sent to the hospital doesn't make you a doctor.