8 ms·

I hate the tone of that letter, has the typical PR tone all over it. Basically to sum it up: "Your Social Security Number, Name, Birthdate, Address, and everyt

I hate the tone of that letter, has the typical PR tone all over it. Basically to sum it up: "Your Social Security Number, Name, Birthdate, Address, and everything else needed to steal your identity is at risk. But don't worry! Your credit card number is safe."

dubyah 12y ago
They stopped taking automatic credit card payments ~3.5 years ago, so even that last bit isn't much of an accomplishment.
- jamra 12y ago
  They also use a different company to do payments for them. That is likely why they said what they said.
prawn 12y ago
And listing income data last, like they're hoping members don't notice it.
jakejohns 12y ago
The whois[1] records for http://anthemfacts.com http://anthemfacts.com was registered in December. It took them months to create that PR report and prepare for damage control. They should have notified victims much earlier. [1] http://whois.icann.org/en/lookup?name=anthemfacts.com http://whois.icann.org/en/lookup?name=anthemfacts.com
- valgaze 12y ago
  THAT is some clever detective work! To give 'em the benefit of the doubt-- perhaps perhaps perhaps they needed that particular domain in anticipation of some other instance where they dropped the ball but your conclusion is more compelling.
  - thirsteh 12y ago
    They recently changed their name. Could be that they wanted to use the domain for something else initially.
- JoblessWonder 12y ago
  So, today it was announced that they knew something was up as early as 12/10: "The company also confirmed Friday that it found that unauthorized data queries with similar hallmarks started as early as Dec. 10 and continued sporadically until Jan. 27. ... The hackers succeeded in penetrating the system and stealing customer data sometime after Dec. 10 and before Jan. 27, Binns said." http://www.sacbee.com/news/nation-world/national/article9480842.html#storylink=cpy http://www.sacbee.com/news/nation-world/national/article9480...
  - wdr1 12y ago
    No conspiracy. They were going to use it for something else. http://webcache.googleusercontent.com/search?q=cache%3AjPUYSj0hSHMJ%3Awww.anthemfacts.com%2F+&cd=1&hl=en&ct=clnk&gl=us http://webcache.googleusercontent.com/search?q=cache%3AjPUYS...
kolev 12y ago
Who cares about credit card numbers when you are protected for free and your credit card can be reissued unlike your SSN. I can't believe than in 2015 there's no modern way to verify and protect your identity! There are still so many stupid system relying on your last 4 of your SSN or DoB as authentication!
- waitwaitwhay 12y ago
  In Sweden we have a personal number. It's unique to every person but its not secret at all. You use an official identity card or passport or the electronic variant to identify yourself. I'm guessing its some kind of privacy issue behind there not being a similar system in US? Because it works pretty well.
  - maxerickson 12y ago
    It's not really a privacy thing, the problem is that people consuming the SSN (banks and such) treat it as authentication. That forces individuals to treat it as sensitive information.
  - cm2187 12y ago
    What we really need is a barcode tattoo!
  - freehunter 12y ago
    There have been some attempts at a National ID, but it keeps getting shot down because people believe it's the Mark of the Beast.
    - webXL 12y ago
      Just rename it Patriot ID and I'm sure people will come around :/ Seriously, if California is giving driver's licenses to whoever wants them (and who's 16 and can learn to drive), I don't see the harm sending out centrally verifiable identity cards. The costs of implementing such a system have gone way down over the years, but to be sure, bid out the job and finance it with surcharges on credit report checks, and any other transaction that involves verifying identity. There are surcharges everywhere else in the transaction. What probably concerns a lot of people is that they don't want the government to know every time they get a credit check. Not sure how you solve that, other than making this a GSE or legal monopoly.

dubyah 12y ago

They stopped taking automatic credit card payments ~3.5 years ago, so even that last bit isn't much of an accomplishment.

jamra 12y ago
They also use a different company to do payments for them. That is likely why they said what they said.

prawn 12y ago

And listing income data last, like they're hoping members don't notice it.

jakejohns 12y ago

The whois[1] records for http://anthemfacts.com http://anthemfacts.com was registered in December. It took them months to create that PR report and prepare for damage control. They should have notified victims much earlier. [1] http://whois.icann.org/en/lookup?name=anthemfacts.com http://whois.icann.org/en/lookup?name=anthemfacts.com

valgaze 12y ago
THAT is some clever detective work! To give 'em the benefit of the doubt-- perhaps perhaps perhaps they needed that particular domain in anticipation of some other instance where they dropped the ball but your conclusion is more compelling.
- thirsteh 12y ago
  They recently changed their name. Could be that they wanted to use the domain for something else initially.
JoblessWonder 12y ago
So, today it was announced that they knew something was up as early as 12/10: "The company also confirmed Friday that it found that unauthorized data queries with similar hallmarks started as early as Dec. 10 and continued sporadically until Jan. 27. ... The hackers succeeded in penetrating the system and stealing customer data sometime after Dec. 10 and before Jan. 27, Binns said." http://www.sacbee.com/news/nation-world/national/article9480842.html#storylink=cpy http://www.sacbee.com/news/nation-world/national/article9480...
- wdr1 12y ago
  No conspiracy. They were going to use it for something else. http://webcache.googleusercontent.com/search?q=cache%3AjPUYSj0hSHMJ%3Awww.anthemfacts.com%2F+&cd=1&hl=en&ct=clnk&gl=us http://webcache.googleusercontent.com/search?q=cache%3AjPUYS...

kolev 12y ago

Who cares about credit card numbers when you are protected for free and your credit card can be reissued unlike your SSN. I can't believe than in 2015 there's no modern way to verify and protect your identity! There are still so many stupid system relying on your last 4 of your SSN or DoB as authentication!

waitwaitwhay 12y ago
In Sweden we have a personal number. It's unique to every person but its not secret at all. You use an official identity card or passport or the electronic variant to identify yourself. I'm guessing its some kind of privacy issue behind there not being a similar system in US? Because it works pretty well.
- maxerickson 12y ago
  It's not really a privacy thing, the problem is that people consuming the SSN (banks and such) treat it as authentication. That forces individuals to treat it as sensitive information.
- cm2187 12y ago
  What we really need is a barcode tattoo!
- freehunter 12y ago
  There have been some attempts at a National ID, but it keeps getting shot down because people believe it's the Mark of the Beast.
  - webXL 12y ago
    Just rename it Patriot ID and I'm sure people will come around :/ Seriously, if California is giving driver's licenses to whoever wants them (and who's 16 and can learn to drive), I don't see the harm sending out centrally verifiable identity cards. The costs of implementing such a system have gone way down over the years, but to be sure, bid out the job and finance it with surcharges on credit report checks, and any other transaction that involves verifying identity. There are surcharges everywhere else in the transaction. What probably concerns a lot of people is that they don't want the government to know every time they get a credit check. Not sure how you solve that, other than making this a GSE or legal monopoly.