5 ms·

Sort of insinuates that ID theft is not meant to be a core focus of Experian.

carbocation 13y ago
> Sort of insinuates that ID theft is not meant to be a core focus of Experian. The post is saying that a service that aids scammers purchased data from Experian. Seeing the title, I initially thought it meant that Experian sold data to an ID Theft-prevention service, which would be less bad.
- greenyoda 13y ago
  I read it the same way, but that would have been pretty bad in and of itself. Why should an ID theft prevention service have data on me unless I have a business relationship with them?
  - carbocation 13y ago
    Going back a step, why should Experian have data on you?
    - sliverstorm 13y ago
      ... Because they are one of the three major credit-scoring agencies that maintain records on every person with a credit history?
      - carbocation 13y ago
        Well, sure, that's a description of what they do, but it doesn't explain why they should have access to this information. In a marketplace, perhaps there doesn't really need to be a "why". But the same "why" should apply to Experian as it would to an ID Theft-Prevention service (the hypothetical thing that we were discussing in this comment thread, and the reason I asked this question in the first place). That is, Experian's longevity and importance makes them more reputable. Their function as a business, certainly, is to collect, analyze, and repackage this data. But these things should not give them a free pass on the "why" question that greenyoda posed, if the question is going to be asked at all.
      - DigitalJack 13y ago
        They said "should" not "would."
    - troyk 13y ago
      And they can sell what they call the "header" of your credit report without regulation (such as the FCRA). This info includes your name, address, ssn and dob. Or at least it did when I bought it in the 90's to build a service to find dead-beat dads. I've heard they are more restrictive on the SSN, but I also would bet that's the #1 data element for the ID thefters.
      - GFischer 13y ago
        I don't understand why the U.S. is so opposed to a nationwide ID, and yet obviously need one, and end up treating other documents less suited to the task as one. Here in Uruguay (and almost everywhere else) we have a national ID number (Cédula de Identidad). It's not supposed to be secret (although it's not a great idea to divulge it freely). http://en.wikipedia.org/wiki/National_identification_number http://en.wikipedia.org/wiki/National_identification_number
        ams6110 13y ago
        I don't see how a new id number will solve anything. We already have a de-facto national id number, the SSN.
        GFischer 13y ago
        Because a new ID number can have security measures. The ID number in my country has photograph, fingerprints, signature, several security measures (difficult to fake). Not so easy to steal (of course there are forgeries, but identity theft becomes much harder)
        kd0amg 13y ago
        Hold on, do you mean an ID number or an ID card? As far as I can tell, the Cédula de Identidad you mention is a card, not just a number. Numbers are pretty much always trivial to duplicate. Checking a physical document kind of requires a face-to-face transaction.
    - johntb86 13y ago
      How else would credit history (and credit in general) work?
      - Silhouette 13y ago
        Voluntarily? If you want to use credit, you have to let lenders collaborate to determine whether they're willing to lend to you, if that's their criteria for making decisions. If you don't want to use credit, they get no special pass to store and use personal data about you. I'm from Europe, where generally personal privacy gets more emphasis than it seems to in some places, notably the US. We have explicit laws about collecting and processing personal data, but certain organisations seem to get a free pass for no apparent reason. As this story demonstrates, the risks are still there. That said, perhaps we shouldn't be too worried. The last time I paid a little real money to get hold of my personal credit report from one of these credit reporting organisations, it was so riddled with obvious errors, including more than a few wildly inaccurate data points, that I was on the phone to them for something like half an hour to get them to correct everything. At that point (I kid you not) the woman on the phone asked if I would be much longer because it was the end of the day and time for her to go home.
        dingaling 13y ago
        I'm convinced that those 'errors' on reports are actually phishing. When I ordered my reports I paid with postal orders, so as not to leak any financial information back to the agencies. I'm glad I did so, as the details ( other than my mortgage ) were laughably incorrect. I was on the verge of writing to correct them and then caught myself - that's exactly what they want, isn't it? So hopefully by now they've diverged even further from the truth.
        pc86 13y ago
        Were they negative elements or just factually incorrect neutral/positive elements? Correct or not, if your credit report is pulled and there is wildly inaccurate (negative) information you can still be declined, and not many people know that you are entitled to a free report if you're declined based on what's in that report.
  - olefoo 13y ago
    Experian is one of the big three credit reporting agencies; their databases are used to determine whether you qualify for a loan. They are your credit record... So, yeah; this is pretty bad.

> Sort of insinuates that ID theft is not meant to be a core focus of Experian. The post is saying that a service that aids scammers purchased data from Experian. Seeing the title, I initially thought it meant that Experian sold data to an ID Theft-prevention service, which would be less bad.

greenyoda 13y ago
I read it the same way, but that would have been pretty bad in and of itself. Why should an ID theft prevention service have data on me unless I have a business relationship with them?
- carbocation 13y ago
  Going back a step, why should Experian have data on you?
  - sliverstorm 13y ago
    ... Because they are one of the three major credit-scoring agencies that maintain records on every person with a credit history?
    - carbocation 13y ago
      Well, sure, that's a description of what they do, but it doesn't explain why they should have access to this information. In a marketplace, perhaps there doesn't really need to be a "why". But the same "why" should apply to Experian as it would to an ID Theft-Prevention service (the hypothetical thing that we were discussing in this comment thread, and the reason I asked this question in the first place). That is, Experian's longevity and importance makes them more reputable. Their function as a business, certainly, is to collect, analyze, and repackage this data. But these things should not give them a free pass on the "why" question that greenyoda posed, if the question is going to be asked at all.
    - DigitalJack 13y ago
      They said "should" not "would."
  - troyk 13y ago
    And they can sell what they call the "header" of your credit report without regulation (such as the FCRA). This info includes your name, address, ssn and dob. Or at least it did when I bought it in the 90's to build a service to find dead-beat dads. I've heard they are more restrictive on the SSN, but I also would bet that's the #1 data element for the ID thefters.
    - GFischer 13y ago
      I don't understand why the U.S. is so opposed to a nationwide ID, and yet obviously need one, and end up treating other documents less suited to the task as one. Here in Uruguay (and almost everywhere else) we have a national ID number (Cédula de Identidad). It's not supposed to be secret (although it's not a great idea to divulge it freely). http://en.wikipedia.org/wiki/National_identification_number http://en.wikipedia.org/wiki/National_identification_number
      - ams6110 13y ago
        I don't see how a new id number will solve anything. We already have a de-facto national id number, the SSN.
        GFischer 13y ago
        Because a new ID number can have security measures. The ID number in my country has photograph, fingerprints, signature, several security measures (difficult to fake). Not so easy to steal (of course there are forgeries, but identity theft becomes much harder)
        kd0amg 13y ago
        Hold on, do you mean an ID number or an ID card? As far as I can tell, the Cédula de Identidad you mention is a card, not just a number. Numbers are pretty much always trivial to duplicate. Checking a physical document kind of requires a face-to-face transaction.
  - johntb86 13y ago
    How else would credit history (and credit in general) work?
    - Silhouette 13y ago
      Voluntarily? If you want to use credit, you have to let lenders collaborate to determine whether they're willing to lend to you, if that's their criteria for making decisions. If you don't want to use credit, they get no special pass to store and use personal data about you. I'm from Europe, where generally personal privacy gets more emphasis than it seems to in some places, notably the US. We have explicit laws about collecting and processing personal data, but certain organisations seem to get a free pass for no apparent reason. As this story demonstrates, the risks are still there. That said, perhaps we shouldn't be too worried. The last time I paid a little real money to get hold of my personal credit report from one of these credit reporting organisations, it was so riddled with obvious errors, including more than a few wildly inaccurate data points, that I was on the phone to them for something like half an hour to get them to correct everything. At that point (I kid you not) the woman on the phone asked if I would be much longer because it was the end of the day and time for her to go home.
      - dingaling 13y ago
        I'm convinced that those 'errors' on reports are actually phishing. When I ordered my reports I paid with postal orders, so as not to leak any financial information back to the agencies. I'm glad I did so, as the details ( other than my mortgage ) were laughably incorrect. I was on the verge of writing to correct them and then caught myself - that's exactly what they want, isn't it? So hopefully by now they've diverged even further from the truth.
        pc86 13y ago
        Were they negative elements or just factually incorrect neutral/positive elements? Correct or not, if your credit report is pulled and there is wildly inaccurate (negative) information you can still be declined, and not many people know that you are entitled to a free report if you're declined based on what's in that report.
- olefoo 13y ago
  Experian is one of the big three credit reporting agencies; their databases are used to determine whether you qualify for a loan. They are your credit record... So, yeah; this is pretty bad.