Cyber Risks · Krebs on Security

Identity Theft More Profitable Than Car Theft

Summary: RouteOne LLC, a credit application service owned by Ally Financial, Ford Motor Credit, Toyota Financial Services and DaimlerChrysler Financial Services, warned more than 20,000 dealerships that six of them had likely malware infections that led to misappropriation and misuse of their RouteOne logon credentials. RouteOne said it had not itself been breached and that any duty to notify affected consumers would fall to the dealerships under 47 differing state breach notification laws.

Bottom line: Six compromised dealership PCs were enough to expose credentials that pull credit reports from all three major bureaus, and RouteOne's position is that no notification trigger was crossed - so the consumers whose identities were used to open fraudulent credit lines may never be told.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related