Equifax used "admin/admin" as login and pass for an unencrypted server full of your personal data

Cory Doctorow 6:32 am Tue Oct 22, 2019

In 2017, Equifax admitted that it had doxed America by leaking the nonconsensual dossiers it builds on the nation, covering up the info while its key employees sold off their stock, and then repeatedly lying about the scope of the breach.

Some of Equifax's investors have sued the company in a Georgia state court. Among the information revealed in the filings: Equifax used "admin/admin" as the login and password for a key server — a portal used to manage credit reports.

Additionally, the data stored on Equifax's servers was unencrypted.

Among the first details to emerge from the breach was Equifax was its terrible IT practices, driven in part by a shopping spree in which it acquired dozens of small companies and failed to integrate them into its networks.

“Equifax employed the username ‘admin’ and the password ‘admin’ to protect a portal used to manage credit disputes, a password that ‘is a surefire way to get hacked,’” the lawsuit reads.

The lawsuit also notes that Equifax admitted using unencrypted servers to store the sensitive personal information and had it as a public-facing website.

Equifax used 'admin' as username and password for sensitive data: lawsuit [Ethan Wolff-Mann/Yahoo]

(via /.)

Finally revealed: identity of hacker blamed for stealing from 300+ companies and governments, in 44 countries

Unsealed court documents reveal the identity of Fxmsp, a hacker from Kazakhstan who is blamed for information theft from more than 300 companies and governments, in 44 different countries around… READ THE REST
IRS says it bought in to location database for millions of US cellphones to track tax crime suspects

The United States Internal Revenue Service says it purchased access to a marketing database that offers location data for millions of US cellphones, so the IRS can identify and track… READ THE REST
Google removes 106 malicious Chrome extensions with 32M downloads that collect browsing history and sensitive credentials

Following the discovery and prompting of a security researcher at Awake Security, Google says it has removed 106 malicious Chrome extensions that had 32 million downloads, and which were gathering… READ THE REST
Short Post, just one paragraph

Dessert cheesecake wafer bear claw fruitcake. Fruitcake chupa chups donut candy canes marzipan. Apple pie sweet roll tart chocolate cake macaroon marshmallow carrot cake gummi bears sweet. Pastry sugar plum… READ THE REST
Save 50% on a 1-year subscription to Dashlane's premium password manager

We all know vital information about ourselves and our private digital accounts can be compromised by cybercriminals. However, many would be frightened to know just how compromised they and their… READ THE REST
The Bite Helper removes the itch of a mosquito bite in seconds

While mosquitoes have certainly earned their title as the deadliest animal on earth, their impact on most of our lives is usually a lot less consequential. But even though they… READ THE REST