3 ms·
Good to see. This is a great development hopefully others follow suit. It was telling in how Equifax announced their breach -- they stressed that "no customer i
by rdtsc 9y ago
Good to see. This is a great development hopefully others follow suit. It was telling in how Equifax announced their breach -- they stressed that "no customer information was impacted" very strongly, right at the top:
https://investor.equifax.com/news-and-events/news/2017/09-07-2017-213000628 https://investor.equifax.com/news-and-events/news/2017/09-07...
Most of US population got exposed but hey our customers are safe, so no big deal. We'll just give everyone credit monitoring and they'll shut up.
The thing is looking back, Equifax wasn't really that impacted. Their stock is back to where it was last January. They'll have some lawsuits but it doesn't seem like they'll be going out of business like everyone expected (hoped even). The other terrible thing there is that it was a lesson for others in the industry. They are watching and learning, if Equifax didn't suffer that much why bother enhancing their security posture. Why spend money if even with such a huge breach the consequences are not that bad.
People are always surprised how banks or other institution have terrible security practices, this is why.
- maxxxxx 9y agoYeah, it's surprising how little impact this had on Equifax so far.
- FireBeyond 9y agoI wish I could say I agreed with you. In truth, it’s eminently unsurprising to me how little impact there has been. Any time we see one of these “should be devastating” data breaches, people/ politicians shake their fist for about a week, but there’s little consequences. Sure, sometimes a company might be fined _five per cent_ of the _profit_ they made from the behavior that lead to the breach. Not sure that’s so much a slap on the wrist as a “tsk, tsk”.
- maxxxxx 9y agoThat was a really big one at a company that has a lot of valuable start on almost every citizen. I can't think of many worse possible breaches. Maybe the IRS or Visa?
- toomuchtodo 9y agoOPM. https://www.opm.gov/cybersecurity/cybersecurity-incidents/ https://www.opm.gov/cybersecurity/cybersecurity-incidents/
- deleted 9y ago[deleted]