Forest Global Training Partners

Cyber Risks · Krebs on Security

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Summary: Intuit notified 1.4 million small businesses using QuickBooks Online Payroll and Intuit Online Payroll that their payroll information will be shared with Equifax starting in early fall 2021 through The Work Number income and employment verification service, unless customers opt out by July 31, 2021. Equifax's workforce-solutions unit, which holds a database of 300 million current and historic employment records and contributed more than a fifth of the firm's $3.1 billion revenue, suffered a 2017 breach that exposed the personal and financial details of 145.5 million Americans.

Why it matters: The same Equifax unit receiving this data runs The Work Number, which KrebsOnSecurity reported in 2017 exposed salary history to anyone with a Social Security number and date of birth, and whose TALX PIN reset questions were guessed by tax refund fraudsters months before the 2017 breach became public. Employees cannot opt out themselves; the decision sits with whichever small business administers the payroll account, and inaction by July 31 counts as consent.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related