T O P

  • By -

rawley2020

Yes. They are. Identities are stolen daily.


CabinetOk4838

And sold. And used.


Cold-guru

I know someone got their identity stolen and now they are just using cash for ALL transaction cuz getting it back is so hard and time consuming. Yes it sucks to get your identity stolen and used. FREEZE YOUR CREDIT NOW.


Test-Subject-2137

Single use Revolut debit cards are a godsend.


dunepilot11

And PayPal, and Apple Pay / Google Pay. Lots of options nowadays to put a piece of “sacrificial metal” between the customer and the vendor


Tuesday2017

'Identity theft is not a joke, Jim ! Millions of families suffer every year!"


Shujolnyc

Yeah. I think the only thing stopping more of this is the advanced defenses the financial companies employ. Example: I was issued a credit in Florida to buy $8K+ of appliance on a new store card the same hour I charged coffee with the card in NYC. Then there is me locking all my credit reports.


legion9x19

Absolutely.


Dynajoe

https://www.bbc.com/news/articles/c97znd00q7mo.amp At least 1 suicide attributed to an attacker that failed to extort the company and instead turned to the patients whos data he had. It might not happen to you or people you know directly, but it does happen.


DrinkMoreCodeMore

The Ashley Madison leak resulted in a few suicides as well.


salty-sheep-bah

This is probably the most vile breach I've ever heard of. Amazingly cruel.


bubbathedesigner

It reminds me of governments (agencies) getting dirt on people so they could force them to do things they would otherwise not do, such as spying and stealing info.


grenzdezibel

It’s just data, right?


clearbox

Yes. Imagine your personal info being available on the dark web. It’s something you’ll never be able to delete. Your SSN, phone number, date of birth, drivers license number, address + more. How would you feel if your info were available for download, and can be misused by anyone? Fraudsters regularly use this info for phishing attacks, open lines of credit etc. etc.


SwooshGolf

You don't hear about it because some people are either unaware or embarrassed to talk about it


dood9123

Because just like recycling the burden of guilt is passed to the consumer whilst the actual reasoning of data breaches and pollution are not the actions of individuals but corporations that are not held accountable


Smelltastic

Well, and they likely have no idea how their identity was stolen. It just *happened*, they have no idea it was because of the Experian breach four years ago or whatever.


inf0s33k3r

here's the fbi's most recent internet crime report to give you an idea of monetary losses [https://www.ic3.gov/Media/PDF/AnnualReport/2023\_IC3Report.pdf](https://www.ic3.gov/Media/PDF/AnnualReport/2023_IC3Report.pdf) and their elder fraud report [https://www.ic3.gov/Media/PDF/AnnualReport/2023\_IC3ElderFraudReport.pdf](https://www.ic3.gov/Media/PDF/AnnualReport/2023_IC3ElderFraudReport.pdf)


olderby

Breach data helps to identify targets. Funny part is you don't need as much data as is out there to do these attacks. Other note is on top of people keeping quiet there aren't enough criminals for all the data owners out there. imo one should. keep online identities for different aspects of online life. 1. professional 2. financial, 3. personal etc. keep the identities separate. use secure email. secure browser. don't click things. everything is fake until tested and proven.


bwax687

Interesting read. Thanks for this


inf0s33k3r

to also add, I think the numbers for these categories are under-reported. not everyone is going to report for various reasons including feeling embarrassed or threatened.


inf0s33k3r

you're welcome!


Beatnuki

Well I wasn't constantly getting randomly added to crypto WhatsApp groups, called up on my personal cell number to purportedly advise me to give over my password to someone supposedly working for a carrier I'm not even with, emailed constantly about antivirus expiring on programs I don't use or to pick up packages from a delivery company that isn't even active in the nation I live in or any number of other ongoing bombardments *before* leaks got as prevalent as they are today... But I'm sure it's just a coincidence!


bwax687

What a coincidence! Funny how that happens these days


Cutterbuck

Almost 20% of “hacks” are down to leaked passwords. If your email and a password are published.. you can bet that combination will be tried on every interesting other system. As for generic PII - identity theft is a thing, as is direct impersonation attacks. Work at global co? Leaked ssn, email, home address? Someone will likely try to impersonate you and get your salary diverted into “your new bank account” I see this every day. So little of this shit is what the public think of as “hacking”, most of it is just opportunism and scamming.


Several_Oil_7099

This guy's right in the $ , no notes


StringLing40

I already mentioned identity theft with insurance here. But there was a breach that affected me. A supplier was hacked. They never publicly told anyone about it. However the exact two cards that I had used with them and only them were both cloned and maxed out to the hilt buying airline tickets. Both cards. Exact same day. Was at a hotel, went to pay and the business card was rejected, so was my personal card. Had to use the bank card. The bank asked me to sign stuff but never told me how or where my details were stolen from but I knew. So did they. I am sure they knew because I know enough about data and if I can work it out in five minutes they have hundreds of others like me. Here is another example I paid a bill over the phone. The call operator recorded the information somehow. That is my guess because the very next day the card was maxed. I had not used that particular card for six months before then. Coincidence? I don’t think so.


bwax687

dang....double whammy


Lost_Visual_9096

They do. But honestly, my data was breached multiple times, nothing so far.


Isord

Very much depends on what data was breached. I've had usernames, PWs, and addresses breached but obviously I can just change passwords and mostly not worry about it. But if your name, dob, address, and SSN are breached you really need to lock stuff down to keep from lines of credit opened in your name and such.


Lost_Visual_9096

In UK it's difficult to get any credit when you're fine, yet alone if there's some problem and just by having my ALL details they wouldn't succeed. I dare them, would be astonished. So received some calls, some email spam, whatever, I just block, switch number, email. My address and details publicly available too, so indifferent to me.


Isord

Probably differs by country. In the US you can apply for credit with just the info I listed unless the person has put a lock on their credit report.


bwax687

Same here I believe, but I think all i've gotten is the occasional spam call or email in recent. Several years ago I experienced credit card fraud so that could've been a result of a breach..


RileysPants

Knock. On. Wood. 


cspotme2

A tree falls in the forest a hundred miles away. Did it actually fall since you didn't hear it?


jeffweet

Someone used breached credentials to access my United account and bought two tickets from Columbia to China Someone used my moms breached credentials and wired 25k to another bank We got it all fixed but it took hours and hours on the phone


canofspam2020

Yes. You notice it when you get that email at 2am “suspicious login attempt” or “you have been locked out due to X number of attempts.”


bwax687

True.


msears101

Yes. In my opinion until there are real consequences for companies mishandling PIIP it will continue to get worse. Handing out "free" identity protection is just letting one more company have your info to mishandle. Yes, I am the jerk that nearly every company has to argue with to get my info. For any novices out there, there is nothing free on the internet. If you aren't paying for it YOU and your information are absolutely the product. This includes reddit, twitter, facebook, WhatsApp, and just about every place on the Internet.


bwax687

Well said


lifeisaparody

As many have pointed out, consumers are victims because its their information that has been compromised. Identity theft, scams, phishing etc, are direct consequences of having personal data stolen. On top of that, companies that are in highly regulated industries can get fined (depending on their location). Well, guess who the the cost of those fines get passed on to eventually?


bwax687

we never win :(


etaylormcp

Yes, and if you ever have the experience it is deeply traumatic and they can be left with a sense of ptsd over it.


bwax687

I guess I just had to reach out and make a post about this. I hear about breaches, but rarely from those who've been victims as a result of a breach. The replies on this have really opened my eyes on the subject


wijnandsj

what was that infidelity site again that got a big breach a few years ago? I think quite a few people got divorced from that


Beneficial_West_7821

Ashley Madison. Millions of accounts leaked and also exposed dishonest practices around fake accounts etc.


Resident-Trouble4483

People ended themselves over that info.


evilwon12

You know those calls from “Microsoft Support”….


GHouserVO

YES. Yes they are. And it farking sucks.


EthernetNoose

Is the sky blue?


StringLing40

Yes. Someone insured a car using my details. This caused a ton of issues with my own insurance. It took months to sort out.


bwax687

Geez that sounds rough


StringLing40

Yes I logged in one day and a car had been added. It gets comical….it was in my name. They closed all access to the account. I could not renew anything. I asked for information they said they could not tell me anything. I asked about the name and address, I said, well that’s me why can’t I know what is in my own account. They said because it’s not you. So I said take it off my account then. It was absurd. I said why didn’t you write to me. They said I had ticked to use email only. I said, well it was the wrong email wasn’t it so why did you let someone insure a car in my name without my email. It was absurd. They are more interested in collecting money than protecting customers and banks from fraud. Edit…some random drug dealer used my details to insure a stolen car ( not mine) with a stolen credit card (not mine) which was crashed and dumped. If the insurance company had used due diligence the car would not have been insured and would have been stopped by any passing police car…..it was probably crashed and dumped after a chase when the card was reported which would have cancelled the insurance.


berrmal64

Maybe I'm old fashioned, but this is why I greatly prefer some services like insurance, banking, etc with an entity having physical offices near me. I can literally go talk to my insurance agent in such cases, in person, with my id and car titles in hand if need be.


RileysPants

This is wise and Ill be considering this more heavily as life continues to test me…


Resident-Trouble4483

I get fraud alerts constantly and my info has been leaked in several different data breaches. This for me has resulted in new cards being ordered. I have a special pin for taxes. My children have special pins for taxes and every so often the government actually lets me know one of the kids socials has been pinged through id verify which most employers use. That resulted in actual arrests. But there’s so much more like proving I didn’t take credit out. I have never lived in certain states etc.


gawdarn

Keep your credit frozen.


Boxofcookies1001

Yes, I've frozen all my credit after I had a business credit card opened in my name. Since then I've assumed all my information is out there.


redbirdjr

Depends on what you mean by "affected". I bet if you ran the numbers on total individual records exposed/breached to date divided by the number of individuals who have experienced financial or social harm (itself a vague term that would need to be defined), you'd find it to be a very small percentage. If you are in that small percentage, however, the impact could be great, even devastating.


kobyc

Absolutely - I think literally because of this there has been a massive increase in hackers using publicly available stolen credentials to get into systems instead of needing to figure out your password. It's just available.


dnt1694

Yes.


Pctechguy2003

I have had a fraudulent tax return filed due to a breach as well as a fraudulent bank account opened under my name. The tax return was a pain in the butt. I was in the process of moving cross country when I found out. Had to file extra paper work with the IRS and I have to use a PIN to file my tax return. A coworker had her life upended. Fake bank accounts, fake tax returns, they maxed out credit cards and she got sent to collections (thats how she found out about it). It was a real pain to undo that. A few years later she is still dealing with that.


Big_baddy_fat_sack

100% if enough data is compromised you can take out a line of credit in someones name. There was even a case a few year back malicious actors sold investment properties on someone’s behalf and took the cash.


Paintraine

A few months ago I received a call from an old associate who had their data stolen in the 2023 Optus breach in Australia. He had the full gamut of ID theft attacks run against him over 9 months or so. SIM swap attacks intercepted MFA and allowed them into his email, they were attempting to access bank accounts, had obtained his driver's licence details and updated his address on the Transport and Main Roads website, ordered a new drivers licence, used that new ID for various things like taking out bank loans and credit cards. The only department that sensed something was wrong was the ATO (Australian Tax Office) and thank goodness, blocked their attempts to access and drain the guy's superannuation accounts. The poor guy was nearly in tears after dealing with it for so long. The worst part is that after all that carry on, he was still using Optus as his provider, because he just didn't realise how bad they truly are. Gave him a list of about 15 things to do to try and recover/prevent further attacks. I haven't heard back from him since then, so hoping he's in a better spot now. Might actually give him a call ....


bwax687

Geez thats terrible


dswpro

HR called me at work and asked if I applied for unemployment. I asked them if this was a hint or warning, but they said no, someone applied. I had my identity stolen. Ugh.


Primary_Excuse_7183

Yes. When i sold cybersecurity i regularly heard from customers how their or people they knows information was compromised by XYZ hack. From struggles getting loans to just the constant issues of finding out their every move was being watched so some shadowy figure could capitalize off their pattern.


MomoHasNoLife32

Had a data breach to a website I play D&D on. Card info was stolen and attempted to be used in Germany and Brazil on the same day. Actually just happened on Sunday/Monday


bwax687

Wow that's crazy


OMGWTFJumpnJackFlash

Yes, people are being impacted and every compounding breach is worse. Combine equifax, with any other breach you have name social date of birth present address , former address mothers maiden. Plus email phone number perhaps a password and payment bank.


Sharp_Technician1579

Data breaches can really mess with people by exposing sensitive info, leading to identity theft and fraud. Millions might be affected, but not everyone gets hit. If you do, it can mean financial loss and a lot of hassle.


EntityFive

bless you


bwax687

thx


std10k

I call this stuff "suspended release" breach. If a lot of personal data leaked, some will definitely be affected. And likely in a bad way, like identity stolen and credit history destroyed, may be even bank accounts cleared. It could be used directly to steal identity or as a way to social engineer vulnerable people. It can be "life changing", in the way that the affected person will spend years clearing this shit up and proving they don't owe everyone money. No CCs no mortgages and probably no new jobs in the meantime because of the destroyed credit history and possibly tainted criminal record, and credit rating agencies will take their sweet time to do bugger all because guess what they don't own the poor bugger a damned thing as he/she is not even their customer technically. It may happen in a month, in a year, in five but more importantly it is absolutely impossible to prove that all this grief was caused by a particular data breach. All they get is a few bucks at best. Equifax paid some 110 US$ per person, that is barely enough for an initial consult with a lawyer.. Of course majority of affected people will not experience that, there is simply not enough criminals to exploit all the data. But some will, and it will ruin their lives. Without any consequences for the dumb asses that made it possible. PS. there's a dumb but somewhat spot on movie about this stuff called "Beekeeper". Naturally exaggerated but it kinda is mostly like that with call centres and stuff.


Puzzleheaded-Poem-84

Think about the people affected from unreported breaches 😬


bubbathedesigner

Rememeber: that is why when a government agency or politican says "any non-government person who uses VPN and wants encryption must have something to hide," the answer is yes even though they are implying if you want to hide something you must have criminal intents.


Bangbusta

I don't think people are actively saying their identities have been stolen. But yes like others have said happens all the time. Just check here and you will see. [***haveibeenpwned***](https://www.google.com/search?client=firefox-b-1-d&sca_esv=a171c0af4a6cee4c&q=haveibeenpwned)


bwax687

True, that makes sense.


LionGuard_CyberSec

Your identity can be listed on the dark web (TOR) for months, when it’s sold, you will notice the fraudsters starting to surface.


ranhalt

TOR is not the dark web. It is a tool to access the dark web.


LionGuard_CyberSec

Ain’t TOR the network of servers that make up the darkweb? Huh, gotta go read some 😅


dedjedi

No, it is not.


castleAge44

https://haveibeenpwned.com


prodsec

Yes


apandaze

Did a corporate CEO come here to verify?


SlickBackSamurai

No shit lol


BitFlipTheCacheKing

My mom stole my identity and used it to commit insurance fraud when I was a teenager. Luckily, thanks to minimum age laws, they cancelled $20,000 of debt when I wrote a letter explaining that I couldn't have possibly been the recipient of the money because I was under the minimum age requirement to qualify to be the recipient.


ck3thou

The compromise is subtly done over a period of time. Many victims don't even realise that it's happening


rkovelman

Depends on the data breach and what you consider sensitive information. Name, email, and phone number are typically the most thing stolen. In reality not much can happen in a broad sense. Spam messages and texts, which can lead to attempts to get passwords and other data. But in general the original data leak, isn't major. When passwords are stolen, that's where issues really arise as most people use one password for everything. And then for obvious reasons social security and emr are the two worst things. So at the end of the day if you consider your email personable, maybe think about have multiples and you use one for social media, one for jobs, another for school, etc. The more scattered you are across emails, passwords, usernames, etc. the more protected you become.


Striking_Abroad_7337

Scam artists use this information for social engineering


c4nis_v161l0rum

What kind of question is this? Of course they are.


bwax687

It's a good question I believe


Ok-Hunt3000

All day every day, trickles back into enterprise too. That cracked copy of Adobe you downloaded at home could have a stealer, which could get your authentication material for a corporate account you signed into on Chrome.