Cyber Risks · Krebs on Security

Experian Breach Affects 15 Million Consumers

Summary: Experian North America disclosed a breach of an internal server that exposed approximately 15 million Social Security numbers and other data on people who applied for financing from T-Mobile USA, including names, dates of birth, addresses, and driver's license numbers. Experian said it detected the breach on Sept. 15, 2015, and confirmed the theft of a single file containing the T-Mobile data on Sept. 22, 2015, while a spokesperson said the exact date intruders broke in remains unclear.

Key Takeaway: The exposed file held Social Security numbers and driver's license numbers, and Experian's response was to offer affected consumers free credit monitoring through its own Protect MyID service rather than a security freeze. This is not Experian's first exposure of consumer records: a Vietnamese man, Hieu Minh Ngo, was sentenced to 13 years earlier this year for running an identity theft service that pulled data directly from an Experian subsidiary, with access to more than 200 million consumer records.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related