Cyber Risks · Krebs on Security

Equifax Breach Response Turns Dumpster Fire

Summary: Equifax announced Thursday that an intrusion exposed Social Security numbers and other data on 143 million Americans, and its response site, equifaxsecurity2017.com, was flagged by browsers as a phishing threat and returned inconsistent or no results, including telling users to check back on Sept. 13 even when gibberish names and SSN digits were entered. The site's WordPress install carried a publicly accessible user entry named "Edelman," pointing to PR firm Edelman, while ZDNet reported the forensic firm was Mandiant, and a look-alike domain, equihax.com, was registered Sept. 5 by a Mandiant employee.

Bottom line: Bloomberg reported three top Equifax executives sold millions of dollars in stock between the discovery of the breach and its public disclosure, and a New York law firm has announced it is investigating potential insider trading claims, while Equifax's shares fell more than 13 percent.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related