Cyber Risks · Krebs on Security

Equifax Breach Fallout: Your Salary History

Summary: KrebsOnSecurity reported that Equifax's TALX division runs The Work Number, a service holding salary and employment histories for a large portion of Americans, and that most employers contributing data rely on weak authentication: a user ID that is often the Social Security number and a PIN that is usually an eight-digit date of birth. Successful validation returns salary and employment history going back at least a decade plus a list of entities that previously requested it, and Equifax took the portal down for maintenance a few hours after the story published.

What you should know: The two data elements needed to pull a decade of salary history - SSN and date of birth - are the same ones stolen in the Equifax breach and widely for sale online, so the exposure extends well beyond the original breach victims.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related