Forest Global Training Partners

Cyber Risks · Krebs on Security

Experian Sold Consumer Data to ID Theft Service

Summary: An identity theft service called Superget.info sold Social Security numbers, driver's license records and financial data on millions of Americans, and KrebsOnSecurity traced much of that data to Experian, which had acquired the third-party broker Court Ventures in March 2012. According to US Info Search CEO Marc Martin, Superget's operators posed as a U.S. private investigator to reach the data, were based in Vietnam, and paid Experian monthly access charges by wire transfer from Singapore for almost a year after the acquisition; Experian acknowledged the outlines of the account and said it worked with the Secret Service, which obtained a grand jury subpoena against the company.

Why it matters: The government alleges Superget.info and findget.me acquired or sold fullz records on more than half a million people, and the alleged operator, 24-year-old Hieu Minh Ngo, was lured to Guam and now faces 15 criminal charges in New Hampshire. A credit bureau that sells identity theft protection took nearly a year to notice monthly cash wires from Singapore paying for access to that data.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related