Forest Global Training Partners

Cyber Risks · Krebs on Security

U.S. States Investigating Breach at Experian

Summary: A KrebsOnSecurity investigation into how an Experian unit sold consumer records to an identity theft service has prompted a multi-state investigation by several attorneys general, with Illinois Attorney General Lisa Madigan calling it "part of a multistate investigation" and Connecticut Attorney General George Jepsen saying his state is looking into it as well. Court records show Hieu Minh Ngo, a 24-year-old Vietnamese national, tricked an Experian subsidiary into giving him direct access to personal and financial data on more than 200 million Americans, and his service drew more than 1,300 customers who paid at least $1.9 million between 2007 and February 2013 to look up data on more than three million Americans.

What's compelling: Experian bought Court Ventures in March 2012 along with all of its customers, including Ngo, and he kept siphoning consumer data and making wire transfers for almost ten months after the acquisition closed - a reminder that acquisition due diligence on who is already pulling data through a purchased business is where third-party risk actually lands.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related