Forest Global Training Partners

Cyber Risks · Krebs on Security

Fact-Checking Experian’s Talking Points

Summary: Krebs on Security fact-checks Experian's talking points about a business unit that sold consumer data to an identity theft service run by Hieu Minh Ngo, noting that Experian acquired Court Ventures in March 2012 and that Court Ventures continued selling records to the ID theft service for almost 10 months afterward. Ngo's service drew more than 1,300 customers who paid at least $1.9 million between 2007 and February 2013 to look up data on more than three million Americans, and prosecutors said Ngo had access to approximately 200 million consumer records.

Key Takeaway: Experian's defense rests on the claim that no Experian database was accessed, while its own subsidiary collected $1.9 million from an identity theft service and, per US Info Search's CEO, never sent the notifications required by state statute. The consumers whose records were sold are the ones still exposed, and the company now quibbling over which business unit profited is the same one with a legal right to sell personal data without consent.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related