Latest in Gear

Image credit:

Equifax's data breach response has its own security flaw

The PIN code that locks your credit report is easy to guess.
Jon Fingas, @jonfingas
September 11, 2017
Share
Tweet
Share

Sponsored Links

Reuters/Dado Ruvic

The Equifax data breach is already unnerving thanks to the sheer scale of sensitive data involved, but it's not helped by the credit reporting agency's initial response. Clients have discovered that the PIN codes Equifax is handing out to help lock your credit report (so a thief can't open a line of credit in your name) are generated by the date and time you made the request. An attacker could determine your code simply through brute force, especially if they have an idea as to when you locked your report.

For its part, Equifax is improving its approach relatively quickly. The company tells Ars Technica that it's moving to a randomized PIN generation system within a day of this writing (no later than September 12th), and that you can always change your existing PIN. We've asked the company for more details as well. However, it's safe to say that the security flaw is more than a little embarrassing for Equifax. Right now, the company is scrambling to limit the damage to 143 million Americans -- the last thing it needs is to create another opportunity for identity theft.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

How and where to pre-order an Xbox Series X or S

How and where to pre-order an Xbox Series X or S

View
Elon Musk warns that Tesla's 'Battery Day' tech is two years away

Elon Musk warns that Tesla's 'Battery Day' tech is two years away

View
NASA outlines how it will take humanity back to the Moon in 2024

NASA outlines how it will take humanity back to the Moon in 2024

View
Amazon's $500 'Prime Bike' is a connected spin bike made by Echelon

Amazon's $500 'Prime Bike' is a connected spin bike made by Echelon

View
The Morning After: Tesla's 'Battery Day' is here and Xbox pre-orders start

The Morning After: Tesla's 'Battery Day' is here and Xbox pre-orders start

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr