all InfoSec news
Identity Thieves Bypassed Experian Security to View Credit Reports
Security Boulevard securityboulevard.com
Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But until the end of 2022, Experian's website allowed anyone to bypass these questions and go straight to the consumer's report. All that was needed was the person's name, address, birthday and Social Security number. …
a little sunshine annualcreditreport.com big bypass consumer copy credit credit reporting credit reports data breaches data security end experian exploiting financial history identity jenya kushnir ne'er-do-well news questions report reporting reports security sen. ron wyden thieves threats & breaches weakness web fraud 2.0 website