Has my identity been hacked? What should I do?

The Equifax hack on top of all the others has many of us anxious.  As the internet meme goes “They had one job.”  (They failed.)  Equifax, as a credit reporting agency, held what I call the “ID theft kit,” name, date of birth, Social Security Number, birthdate, driver’s license, addresses current & prior, and credit account numbers.  I have pretty much the same quality of data.  That’s why I’m so careful with my security procedures!

People are asking how to find out if they were affected.  You can ask Equifax on their website or phone, but they’re making up the answers (see media reports).  If it’s 143,000,000+ people, I think it’s reasonable to assume that we all were.  The US population of 300 million includes children, seniors and folks who have no credit records.  The Equifax hack could cover pretty much everybody else.

So, what now?  All your information is out there for sale on the dark web.  A Yahoo! Finance story indicates there’s proof of an uptick in fraud attempts already.

My suggestions:

  • The key step to take now is to put a CREDIT FREEZE on your accounts with Equifax, Experian, TransUnion and CBC Innovis.
    • It’s not free, except at Equifax (for the next 30 days). Expect to pay $5-10 each unless you’re already an ID theft victim or 62+.
    • Keep the PIN you’re assigned in order to remove the freeze or “thaw” it.
    • You will need to thaw in order to apply for credit – a car, a house, a credit card — but it just takes a few minutes. So if you’re shopping right now, hold off, but get back & do it soon.

Equifax: 1-800-685-1111 (3) or www.freeze.equifax.com

TransUnion: 1-888-909-8872 or TransUnion.com/securityfreeze

Experian: 1-888-397-3742 Experian.com/freeze

Innovis: 1-800-540-2505 www.innovis.com/securityFreeze/index

 

  • Equifax has offered “free” ID theft protection for one year, but is taking credit cards for auto renewal. I don’t see a reason to pay them – or to trust them.  I’m skipping it.  You can buy ID theft monitoring from Lifelock or one of the other players, but count me unconvinced. (http://www.reviews.com/identity-theft-protection-services/)
  • Check your credit report free at https://www.annualcreditreport.com/index.action. Under federal law, you’re entitled to a report every year from each of the 3 major bureaus.  If you cycle them one every 4 months, you can be on top of it.
  • Then, don’t make it any worse. Practice safe habits yourself:
    • Password protect your computers, cellphones & tablets. Treat them like cash in public; don’t turn your back.  Then take care disposing of them and their stored data when they die.
    • Enable auto update to keep all software updated – especially operating system (eg. Windows) & browsers.
    • Password protect your modem & routers. Don’t use public wi-fi to access secure sites.
    • Use strong (long, complex, random) passwords and use them once. (Try a PW manager:  https://www.pcmag.com/article2/0,2817,2407168,00.asp)
    • Maintain anti-virus & anti-malware programs on all devices. (Yes, you might need to pay for that: https://www.pcmag.com/article2/0,2817,2372364,00.asp.)
    • Set your browser to advise you of risky sites & then don’t visit them. Don’t click on pop-ups.
    • Don’t use unsecured email for sensitive information like SS numbers!
    • Never open email attachments unless you know exactly what they are and you’re expecting them from that person. Learn how to check the sender (http://www.phishing.org/what-is-phishing).
    • Use 2-factor authentication (which requires a texted or emailed code) on bank & investment accounts & anything really critical.
    • Back up your files periodically somewhere secure: on an encrypted drive or online.

The Federal Trade Commission (FTC) has lots of good info:

https://www.consumer.ftc.gov/features/feature-0014-identity-theft

Please feel free to query me about my security procedures. And ask at your doctor’s office and *anywhere* anybody asks for your SS number or anything else sensitive!  I’ve seen incredibly sloppy procedures in the medical and banking fields  — and they have the “ID Theft kit” too.

Be careful out there.

 

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s