6 ms·

My cousin had an account on there with 102 BTC, and bought it while the price was around $650. He was having a hard time since last few days, but after a trekki

by iamshs 13y ago

My cousin had an account on there with 102 BTC, and bought it while the price was around $650. He was having a hard time since last few days, but after a trekking trip and being with him since the fiasco he seems to be coping up fine. He is more worried about the Driver's license copy he provided as a verification. The database sure is leaked, and Identity theft seems real possibility. What are the safeguards that can be adopted now? Any help will be good.

jsaxton86 13y ago
FWIW, the original reddit post says "Keeping in line with fucking Gox alone, no user database dumps have been included."
- nwh 13y ago
  Just because it's not posted publicly doesn't mean it won't be used by whatever parties have it. Given that this seems to be an American posting (comments about pizza and beer) and not the badly-typed Russian hacker earlier, it would appear that two parties at least have a copy of this information now (or alternatively got the information independently). You'd be a fool to assume this person is acting in good faith, they've exposed a hell of a lot of private data by posting this alone.
- iamshs 13y ago
  True. They have not included it, they probably have it. Maybe there are other people who already have accessed it. He is effectively considering it in hands he may not want.
- LocalPCGuy 13y ago
  But, if that hacker can get in, more nefarious ones can as well. You should assume that any information stored with Gox is now no longer private.
- gwern 13y ago
  That's because they may be selling the rest of it. A 'nanashi' has already posted on Bitcointalk their terms (100btc for the entire dump, 10btc for 2gb etc).
colechristensen 13y ago
The ground-floor safeguard-which-isn't-a-safeguard is subscribing to one of many credit monitoring sites so you know what's happening. Your state will have information about what to do if your drivers license was lost or stolen (even though obviously he still has the physical license). Some states will have somewhere to report you may be the target of identity theft. You should see if you can replace your license.
- iamshs 13y ago
  It is a freaky situation to experience. It was straight freakout at first, which will now be replaced by lifelong paranoia of stolen identity. Thank you. I did not know that the license could be replaced. If that can be done, that would be somewhat good. Here are the steps found on the mounties site [1]:- A- File a police report. B- Contact your financial institutions. C- Report to Equifax and TransUnion Canada D- Report to info@antifraudcentre.ca He is more freaked out due to the recent news reports of stolen passports used on the MAH 370. [1] http://www.rcmp-grc.gc.ca/scams-fraudes/id-theft-vol-eng.htm http://www.rcmp-grc.gc.ca/scams-fraudes/id-theft-vol-eng.htm
  - jdp23 13y ago
    Privacy Rights Clearinghouse has an excellent fact sheet for dealing with identity theft in the US. https://www.privacyrights.org/identity-theft-what-do-if-it-happens-you https://www.privacyrights.org/identity-theft-what-do-if-it-h... Not sure how much applies to Canada but there's some very good stuff there.
    - iamshs 13y ago
      Thank you. That link was wonderful. Pretty much all of it applies. I think doing a credit freeze will shrink the size of the damage, though medical identity theft still remains a possibility.
mindslight 13y ago
Primarily, you need to straighten out your framework - "identity theft" isn't actually a real thing. It's a marketing term to scare people into thinking they share fault for institutions' trivially broken systems. In the event that a third party commits fraud using your cousin's non-secret driver's license number and your cousin suffers repercussions, the actual concepts you're looking for are libel and tortious interference committed by credit bureaus and banks.
- carbocation 13y ago
  Is that a legal theory that has been supported by court victories?
  - mindslight 13y ago
    I've no idea about recovering damages, but it's at least congruent with reality. No competent security analyst would ever declare that numbers openly printed on a card and freely submitted on forms and devices are authentication secrets.
    - kjs3 13y ago
      So the answer is "no", right?
  - pessimizer 13y ago
    It's not a legal claim.
- roel_v 13y ago
  What kind of stupid comment is this? "Identity theft" has caused people to be chased by collection agencies, to be prosecuted for or imprisoned for crimes they had nothing to do with, and credit ratings ruined. Case in point: a copy of a guy's id card here was used when signing a lease for an apartment. Apartment was later found to contain marihuana plantation. Public prosecutor claims the guy is the guy behind it all, and has him arrested several times until 2 years later, at trial, the judge decides 'well it can't have been this guy, given all the circumstances'. In the mean time, he lost his job over it, was so stressed and depressed that his relationship fell apart, and was in financial ruins. He handed a copy of his id to a temp agency once before this thing happened. Probably somebody there copied it, or there was a break-in there and somebody took it. There was no way to hold them responsible, nor were the actual people who rented the house ever found. How can you say that 'identity theft' isn't real?
sciguy77 13y ago
I feel for your friend. I lost a lot of money as well, plus they have a copy of my drivers license and a copy of a utility bill for my home.
- iamshs 13y ago
  I feel for you. He says hardest part was breaking the news to family. Straight afterwards he drove down to me, he said hearing scorn every second was becoming overbearing for him. Cryptocurrency can be hard to explain in layman terms.
  - sciguy77 13y ago
    That's exactly right. I told those close to me that an overseas financial services company I was using collapsed. I only specify Bitcoin if they press for details.
deleted 13y ago
[deleted]
dantiberian 13y ago
I signed up for a Mt. Gox account ~12 months ago and included my drivers license. I then cancelled the account a few weeks later after one of the many Mt. Gox incidents. A few months ago when the price skyrocketed to $1000 USD/BTC I reopened my account with Mt. Gox. They didn't require any further information from me, just a a request to open the account. I took from that that even when an account is cancelled/deleted, they still retained all user information including drivers licenses. Even if you deleted your Mt. Gox account before they went bust you may still be at risk.
- mrb 13y ago
  Retaining a customer's information after the account is closed is usually required by know-your-customer and anti-money laundering laws.
  - dantiberian 13y ago
    Yes you're right, I thought that would have been the case. Just putting it out there for people who might think they are safe.

by iamshs 13y ago

jsaxton86 13y ago

FWIW, the original reddit post says "Keeping in line with fucking Gox alone, no user database dumps have been included."

nwh 13y ago
Just because it's not posted publicly doesn't mean it won't be used by whatever parties have it. Given that this seems to be an American posting (comments about pizza and beer) and not the badly-typed Russian hacker earlier, it would appear that two parties at least have a copy of this information now (or alternatively got the information independently). You'd be a fool to assume this person is acting in good faith, they've exposed a hell of a lot of private data by posting this alone.
iamshs 13y ago
True. They have not included it, they probably have it. Maybe there are other people who already have accessed it. He is effectively considering it in hands he may not want.
LocalPCGuy 13y ago
But, if that hacker can get in, more nefarious ones can as well. You should assume that any information stored with Gox is now no longer private.
gwern 13y ago
That's because they may be selling the rest of it. A 'nanashi' has already posted on Bitcointalk their terms (100btc for the entire dump, 10btc for 2gb etc).

colechristensen 13y ago

The ground-floor safeguard-which-isn't-a-safeguard is subscribing to one of many credit monitoring sites so you know what's happening. Your state will have information about what to do if your drivers license was lost or stolen (even though obviously he still has the physical license). Some states will have somewhere to report you may be the target of identity theft. You should see if you can replace your license.

iamshs 13y ago
It is a freaky situation to experience. It was straight freakout at first, which will now be replaced by lifelong paranoia of stolen identity. Thank you. I did not know that the license could be replaced. If that can be done, that would be somewhat good. Here are the steps found on the mounties site [1]:- A- File a police report. B- Contact your financial institutions. C- Report to Equifax and TransUnion Canada D- Report to info@antifraudcentre.ca He is more freaked out due to the recent news reports of stolen passports used on the MAH 370. [1] http://www.rcmp-grc.gc.ca/scams-fraudes/id-theft-vol-eng.htm http://www.rcmp-grc.gc.ca/scams-fraudes/id-theft-vol-eng.htm
- jdp23 13y ago
  Privacy Rights Clearinghouse has an excellent fact sheet for dealing with identity theft in the US. https://www.privacyrights.org/identity-theft-what-do-if-it-happens-you https://www.privacyrights.org/identity-theft-what-do-if-it-h... Not sure how much applies to Canada but there's some very good stuff there.
  - iamshs 13y ago
    Thank you. That link was wonderful. Pretty much all of it applies. I think doing a credit freeze will shrink the size of the damage, though medical identity theft still remains a possibility.

mindslight 13y ago

Primarily, you need to straighten out your framework - "identity theft" isn't actually a real thing. It's a marketing term to scare people into thinking they share fault for institutions' trivially broken systems. In the event that a third party commits fraud using your cousin's non-secret driver's license number and your cousin suffers repercussions, the actual concepts you're looking for are libel and tortious interference committed by credit bureaus and banks.

carbocation 13y ago
Is that a legal theory that has been supported by court victories?
- mindslight 13y ago
  I've no idea about recovering damages, but it's at least congruent with reality. No competent security analyst would ever declare that numbers openly printed on a card and freely submitted on forms and devices are authentication secrets.
  - kjs3 13y ago
    So the answer is "no", right?
- pessimizer 13y ago
  It's not a legal claim.
roel_v 13y ago
What kind of stupid comment is this? "Identity theft" has caused people to be chased by collection agencies, to be prosecuted for or imprisoned for crimes they had nothing to do with, and credit ratings ruined. Case in point: a copy of a guy's id card here was used when signing a lease for an apartment. Apartment was later found to contain marihuana plantation. Public prosecutor claims the guy is the guy behind it all, and has him arrested several times until 2 years later, at trial, the judge decides 'well it can't have been this guy, given all the circumstances'. In the mean time, he lost his job over it, was so stressed and depressed that his relationship fell apart, and was in financial ruins. He handed a copy of his id to a temp agency once before this thing happened. Probably somebody there copied it, or there was a break-in there and somebody took it. There was no way to hold them responsible, nor were the actual people who rented the house ever found. How can you say that 'identity theft' isn't real?

sciguy77 13y ago

I feel for your friend. I lost a lot of money as well, plus they have a copy of my drivers license and a copy of a utility bill for my home.

iamshs 13y ago
I feel for you. He says hardest part was breaking the news to family. Straight afterwards he drove down to me, he said hearing scorn every second was becoming overbearing for him. Cryptocurrency can be hard to explain in layman terms.
- sciguy77 13y ago
  That's exactly right. I told those close to me that an overseas financial services company I was using collapsed. I only specify Bitcoin if they press for details.

deleted 13y ago

[deleted]

dantiberian 13y ago

I signed up for a Mt. Gox account ~12 months ago and included my drivers license. I then cancelled the account a few weeks later after one of the many Mt. Gox incidents. A few months ago when the price skyrocketed to $1000 USD/BTC I reopened my account with Mt. Gox. They didn't require any further information from me, just a a request to open the account. I took from that that even when an account is cancelled/deleted, they still retained all user information including drivers licenses. Even if you deleted your Mt. Gox account before they went bust you may still be at risk.

mrb 13y ago
Retaining a customer's information after the account is closed is usually required by know-your-customer and anti-money laundering laws.
- dantiberian 13y ago
  Yes you're right, I thought that would have been the case. Just putting it out there for people who might think they are safe.