Fraud prevention group claims stolen Experian data put up for sale

experianlogo

When we first learned of the Experian data breach a couple of days ago, Experian said that “there is no evidence that the data has been used inappropriately.” However, that might change soon.

Irish fraud prevention company Trustev claims that information obtained from the Experian breach — which includes data of consumers that had their credit checked by T-Mobile — may be up for sale online. Trustev monitors corners of the web that sell stolen personal data, and the firm says listings started appearing this weekend that offer the same kinds of information stolen from Experian. A screenshot of one alleged listing can be seen below. The listings are offering FULLZ data, which is a term for the full package of a person’s data, like SSN, name, date of birth, and more.

tmobileexperiancustomerinfo

These listings don’t specifically mention T-Mobile or Experian, so there’s no guarantee that these listings are selling T-Mobile customer data. However, Trustev says that it’s “extremely likely” considering the type of data being sold and the timing of these listings. “Once fraudsters get their hands on data, they typically unload it very quickly, Trustev says.

Again, it’s not been confirmed that T-Mobile data is being sold, but it very well could be. And given all of the personal info that was taken in the Experian breach, now would be a good time to sign up for the free credit monitoring being offered by Experian and T-Mobile if you got an alert that your data may have been stolen.

The good news is that now Experian is offering a second identity protection method. When news of the breach first broke, Experian said that it’d offer two years of free credit monitoring service through ProtectMyID, which is an Experian product. Unsurprisingly, not many folks were thrilled about getting credit monitoring from the company that just experienced a data breach. Now you can get an alternative identity protection service by calling Experian at 1-866-369-0422.

Thanks, Austin!

Source: VentureBeat

Tags: , ,

  • trickinit

    So let me get this straight, rather then sign up for the identity monitoring through Experian, the alternative is to call them? Call me crazy, but that doesn’t make a whole lot of sense.

    • camguy1975

      They don’t want to provide what amounts to free advertising for the competing product, and they want to minimize their out of pocket expense vs. Their in house credit monitoring solution which they can simply expense as a cost of doing business. Stupid. They should be putting our needs ahead of their own.

      • trickinit

        Yeah, I guess that makes sense. Kind of odd though. I would think T-Mobile would be the one offering the alternative.

      • Curtis Beeler

        last monday I got a great McLaren F1 since geting a check for $18350 this last 5 weeks and-a little over, 17-grand lass-month . it’s certainly the coolest job I have ever had . I actually started 10-months ago and practically straight away was bringing in minimum $97, p/h . read the full info here
        roc……
        >➤➤➤➤➤➤ http://www.DailyFinanceReportz.ml

        !!#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#!!

  • Mirad77

    WHAT THE F……….

    • Jsun

      Exactly my thoughts!!!

  • cellularcrazy09

    You can also dm tmobilehelp on Twitter and they will send you the alternative link. Did it yesterday.

    • Matt

      Mind sharing the link for those of us without twitter?

      • cellularcrazy09

        Csid.com/Tmobile

      • cellularcrazy09

        Tried. Tmonews didn’t approve it.

        • thepanttherlady

          The link was approved a while ago.

    • brybry

      are they able to tell if you’re info has been compromised ?

      • cellularcrazy09

        If the alert is up when you login to mytmobile, then your info was exposed in the breach.

        • brybry

          Would my account get the same alert if my wife switched over from ATT last year with her own account and then joined my account after 3 months ?

        • cellularcrazy09

          Probably. I would just sign up for the protection plan anyway just to be safe and it’s free.

        • brybry

          yea i’ll have to get my wife to sign up.

        • KOLIO

          Where exactly would I see this alert?
          The only place I’ve seen a mention of it is on the main site page at the bottom of the page/left-hand corner.
          I do not see anything on the “My T-mobile” page when logged-in.
          Didn’t see it before,or after signing-up w/Experian’s “after care”.

          TIA.

        • cellularcrazy09

          It says it on the top right side of the page when you login or under account alerts. The alert isn’t affected by you signing up for the protection plan.

        • KOLIO

          Thank you,the quick response is very much appreciated!
          All I see is this:

          Count down to Zero Down for All. You have made 12 or more consecutive, on-time payments and now qualify for the Zero Down for All program and zero down on select devices.

          & this:

          EasyPay is not currently active on your account. Avoid service interruption and late fees by enrolling.

        • Anony Mouse

          I’m not sure this is absolutely correct. I have the alert on my T-Mobile page that says I may be affected, but I ran a credit report and it looks like my info was checked through Transunion. There is no mention of T-Mobile on my Experian report, but I do indeed have the alert. I think they just post that for anyone and everyone who had their credit processed during those two years, but another bureau may have actually processed it and not everyone was affected. Run credit reports to determine exactly what bureau actually processed the credit check. There you will find your answer.

        • thepanttherlady

          That will work if it was run in the last 25 months. Anything past that won’t show up anymore.

        • thepanttherlady

          Ignore my last comment. I was thinking the range was 2012, not 2013.

      • Chris

        You can contact customer service. The rep that I talked to said, they get updates from Experian. So you can ask if your info was compromised.

        But they only know what Experian tell them.
        So, in a hindsight even if they said you weren’t affected, just sign up for the free one and cancel it later on if you don’t want to pay.

  • steveb944

    Wow that’s horrible. The only good thing is there’s an alternative now.

  • Philip

    My cc when there is a charge, I get instant sms to my phone. It help me keep track of the boogie man and also my wife as I know what she buy n where she is. Give it a try with this free alert thing.

    • thepanttherlady

      Except it won’t tell you if someone has opened or is trying to open credit with your info.

    • ConceptVBS

      What are referring to is credit card use monitoring. AndThat’s only good for credit that you already own.

      What’s worse is that they can open a new credit card you don’t even have clue about. They rack up the charges and don’t pay. Killing your credit score. It’s up to you to prove to them that you did not make those charges. Good luck going g through that mess. Lawyers fees, time wasted, banks decline your loan application because of bad credit, lost job applications, rental applications, etc the list goes on.

  • YABD

    This is very sad. Experian what will do to solve this problem.?

    • Chris

      Give free monitoring subscription for limited amount of time.
      And since it’s publicly available, all hackers have to do is wait til said time is over before they use it.

      I’ve learned that spending $20 a month on a complete monitoring service (i.e. deep web scans for SSN, account numbers, etc,) would be much better than having to find out a year later that my credit was trashed.

      I monitor my credit monthly and get alerts whenever anything changes – new accounts opened, balance changes, etc.

      • thepanttherlady

        What service do you use if you don’t mind my asking.

  • Hmmf

    How about throwing us a bone and giving free credit scores in addition to the free credit reports? It was their fault, why are you still charging membership fees for it?

    • nycplayboy78

      EXACTLY!!!

    • Chris

      huh?

      your score is part of your report – therefore when you get said free report, you get free credit score.

      • thepanttherlady

        FICO scores are not free.

  • jonathan3579

    That link is dead. It leads to a 404. :/

    • cellularcrazy09

      That’s weird. When I click on it in my message, it goes to the sign up page. But when I type it in, it does the 404 message.

  • guest
  • Allen Alberto Enriquez

    I have been trying to login in since Friday evening, and it’s Sunday still having problems, the costumer rep say’s their servers are overwhelmed, I hope something better comes out of this I am very disappointed, at this point I vote T-Mobile to work with a different company.

    • camguy1975

      They probably will. The need to demonstrate to their customers they are doing something about it, even though such actions are token at best. The alternatives aren’t any better.

  • cloud strife

    I can’t remember if they did a credit check for getting a new phone when I’m a long time customer way back 2005. Do they? I got my G3 last year August as well as my plan got changed to simple plan.

  • john

    This is a reminder to NEVER trust others to fully protect you. The only person who know you and can take the best care of you is YOU not Experien, Tmobile or the GOV

    • Richard Roma

      How many data breaches occur in other highly developed civilized and regulated Big Gov nations? Oh that’s right, company directors are held personally liable in most other developed countries and companies are fined millions of dollars.

      But this is Murica where we have Guns and freedom.

  • nycplayboy78

    SIGH….I am already a member of ProtectMyID….I will call the number and get the other form of protection whatever that may be…SIGH….

  • guest

    Two things:
    1. I saw a link for a letter from John Legere to the costumers regarding this issue, with the links, when I went to T- Mobile dot com.

    2. Can someone who has sign up with the alternative credit monitoring service share the name of the service or company?

  • Joemail

    these guys are fking unbelievable at experian. It’s the worst of all 3…and now this fiasco..their site requires you to put in a CC in the checkout for your FREE two year protection of which THEY were responsible…So now i get to give them a CC too?!

    then you bite the bullet and say fk it ill sign up..only to be greated with this for a couple of tries…

    We’re sorry …
    We are currently unable to process your request. If you need further assistance, please email us at support@protectmyid.com or call us at 1-866-960-6943. Thank you – we appreciate your business!

    • thepanttherlady

      If you follow the correct link, no credit card is required:

      http://www.protectmyid.com/default.aspx?sc=678628

      If you failed the verification process, then it will pose a problem trying to access your information.

      • Goat

        I also received the error Joemail mentions. I think it was just a backend issue. I tried again and succeeded without problem.

      • DKBNYC

        No CC information was requested of me.

    • Chris

      It’s most likely a backend problem. I don’t have experian know, but I do have another monitoring service. I’ve had a bad experience with them before (3 years ago) Thanks to all these companies getting hacked. *Cough* *Cough* Sony *Cough* *Cough* The only difference is – Sony hack didn’t include any SSN, DOBs, and driver’s license.

  • guest

    Well guys, I’m not convinced CSID is a better option than ProtectMyID.

    Just because is not a Experian product doesn’t make it better.
    I’ll continue my research a little more.

    • Anony Mouse

      CSID is through one of the other bureaus, TransUnion.

      • guest

        From what I was reading ProtectMyID only checks Experian data, meaning it doesn’t check the other two bureaus. But still I’m not feeling confident with CSID as a company and the service they provide. I’m not giving my information to another company. I know, they probably have it already.

        What I’m gonna do is get the ProtectMyID, then put a lock on my credit or put a fraud alert and then get a credit report every four months (once a year from each bureau).

        • Anony Mouse

          The crappy thing about it is this… Experian lost consumer’s data in this breach. To protect ourselves in the aftermath, the best thing to do is put a security freeze on our credit. So, Experian actually PROFITS off this event because it does cost money to freeze your credit (unless you have a police report citing an actual identity theft has occurred). This is something that either T-Mobile or Experian SHOULD be covering to actually protect us. Instead, they offer a monitoring service as a band aid once someone has already tried to open an account in our names. People have had to pay anywhere up to $30 to get their credit frozen. I am just angry the most that Experian is financially profiting now over their negligence due to the panic.

        • guest

          Yeah, it sucks.
          Someone should ask JL to ask Experian for these options for free.
          The lost personal info is not going to expire on the hands of crooks after the two years of monitoring.
          I never dealt with this problem before so I don’t know how it works.
          But I think there should be a better way of dealing with id theft industry wise and governmental. Maybe instead of using SSNs there should be Credit Numbers, and you can get a new one after a compromise.

        • Anony Mouse

          I emailed Mr. Legere yesterday. I have yet to hear anything back from him regarding compensating for having to place security freezes due to the breach. It appears that publicly he is all about, “I’m angry!” and “What can I do to make it better?” But behind the scenes?… crickets chirping.

        • Anony Mouse

          Response from someone that works with the executive office…. It wasn’t T-Mobile’s fault, and Experian “went out of their way” to extend a free two year credit monitoring program (which apparently doesn’t happen in most of these cases?) through both their company and TransUnion. Experian will do nothing more than that and Mr. Legere will not even discuss the possibility of reimbursement of security freeze fees with just the Experian branch.

  • guest

    i dont even know who to sign up for the Tmobile or the experian what ones better

  • trife

    So I called Experian to learn more about this other type of credit monitoring. They gave me the exact same number that I used when I called them.

    Unbelievable.

    • csid.com/t-mobile is the other monitoring service. Gotten from T-Mobile twitter help.

  • tmobile

    i signed up in march gave them my SSN but i paid in cash because i dont have credit cards in my name. so am i safe

    • guest

      It’s not about stealing your credit card number. If they have you name, SSN, DOB and everything about you, they can act as you and open credit accounts anywhere they choose as long as the info is accurate. It would be a good idea to monitor your credit and catch something soon after you notice it.

    • Calvin Hodgson

      SSN, name, DOB and address is all they need for identity theft. Look it up.

  • Stacey J

    That linked worked for me when I signed up. Now it’s not working so oh well I’m still signed up.

  • guest22

    well whats better protectmyID or CSID

    • thepanttherlady

      They’re free, sign up for both.

      Protect My ID is Experian and CSID is Transunion. You can also sign up for Credit Karma which will give you TransUnion and Equifax. It’s free as well.

      • guest22

        credit karma asks to mail my info after i signed up im not doing that

        • thepanttherlady

          Then don’t. Only you can decide how you want to monitor your information.

    • VernonDozier

      LifeLock.

      I received an email from them about the breach already… And they said I’m protected.

      I didn’t have to wait for a snail-mail letter to give instructions of what to do while personal information is actively sold on the “dark web”.