Experian’s Treasure Trove Of PII Breached By Simply Altering URLs

Experian’s Treasure Trove Of PII Breached By Simply Altering URLs

from the collecting-it-all-just-to-give-it-away dept

Data brokers like Experian and Equifax pose tempting targets for malicious hackers looking to find another source for personal info they can hawk online to other malicious people. The sad thing is, no one really needs to hack their databases. They’re more than willing to just leave them exposed.


In 2017, Equifax leaked personal info pertaining to nearly half the nation (143 million people). The credit reporting agency knew of the breach as early as July but didn’t get around to notifying affected people for another couple of months. A few wrist slaps later and Equifax is still making millions while affected US residents are being asked to make do with [squints at recently received Equifax settlement check] $7.85.


Experian has its own sordid history. Not only has it been fined multiple times for misleading people about access to free credit reports mandated by federal law, it was caught selling personal info to a Vietnamese fraudster who sold this illicitly obtained stash of PII to others.


Brian Krebs was the one who broke that story in 2013. He’s on the leading edge of this one as well, which shows Experian hasn’t gotten any better at protecting the massive amount of personal info it obtains from millions of Americans who have zero say in the matter.



Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their ..

Support the originator by clicking the read the rest link below.