Cyber Risks · Krebs on Security

Experian Breach Tied to NY-NJ ID Theft Ring

Summary: Experian told Congress it knew of no consumers harmed after a business unit sold consumer records directly to an identity theft service for nearly 10 months, and Krebs reports that among that service's clients was a New York-New Jersey identity theft and credit card fraud ring of at least 32 people arrested last year. The service, run by Hieu Minh Ngo as superget.info, drew more than 1,300 customers who paid at least $1.9 million between 2007 and February 2013 to look up data on more than three million Americans, and Experian kept selling to Ngo for almost ten months after buying Court Ventures in March 2012.

What you should know: The ring authorities described identified nearly 1,000 victims and millions of dollars in phony transactions, and some of the proceeds were sent to accounts in Nigeria - a concrete downstream cost of a data sale Experian says touched no Experian database.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related