Equifax Breach Fallout: Your Salary History
Summary: KrebsOnSecurity reported that Equifax's TALX division runs The Work Number, a service holding salary and employment histories for a large portion of Americans, and that most employers contributing data rely on weak authentication: a user ID that is often the Social Security number and a PIN that is usually an eight-digit date of birth. Successful validation returns salary and employment history going back at least a decade plus a list of entities that previously requested it, and Equifax took the portal down for maintenance a few hours after the story published.
What you should know: The two data elements needed to pull a decade of salary history - SSN and date of birth - are the same ones stolen in the Equifax breach and widely for sale online, so the exposure extends well beyond the original breach victims.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026