At this writing, the full impact of the massive Yahoo data breach announced Sept. 22 was not known. However, it appears that hundreds of millions of consumers have had private information exposed in what’s believed to be the biggest data breach to date.
Yahoo said hackers had stolen information from at least 500 million users’ accounts, including names, addresses, phone numbers, dates of birth and encrypted passwords. Yahoo said the breach took place in 2014. Technology reporters had written earlier that stolen data from millions of accounts were being sold on the dark web.
This latest breach comes at a time when cybercrime is booming. For years, crooks have opened phony accounts to buy all sorts of things using other people’s good credit records. The thieves don’t pay their bills, and the law-abiding consumers are left to dispute the charges. It can cost time and money to straighten out a credit report following such an incident.
All of this leaves millions of consumers with another reason to review their credit reports. William Lund, superintendent of Maine’s Bureau of Consumer Credit Protection or BCCP, said recently all consumers should look for signs of trouble and act quickly.
“A single phone call for an alleged debt that’s not yours should be looked into since it may be the tip of a larger iceberg. Start by checking your credit reports,” Lund said.
Federal law says that each of the major reporting agencies — Equifax, Experian and TransUnion — is required to provide every consumer with a free credit report once per year. Consumers can call each company’s toll-free phone number to request a free report.
To start the process online, go to the truly free website AnnualCreditReport.com. Don’t deal with online websites that promise “free” reports; you might be pressured into buying a credit report, credit monitoring or other services.
Anyone with concerns about her or his credit should pick one of the three reporting agencies and ask for a free report right away. In four months, ask another agency; four months after that, ask the third agency. Rinse and repeat forever.
If your credit report shows accounts were opened that you did not authorize, you may be a victim of identity theft. In fact, accounts may have been opened in the name of any family member. You can freeze your account, meaning no one else can open an account in your name. Get help from Maine’s BCCP by calling toll-free 1-800-332-8529.
Privacy experts say too many of us use too few passwords. A breach that reveals a password securing one account may put other accounts at risk. For that reason, it’s wise to change ALL of your passwords at least once per year. If you know an account has been breached, change right away.
Get more tips on safeguarding your personal and financial information from the U.S. Department of Justice at justice.gov/criminal-fraud/identity-theft/identity-theft-and-identity-fraud.
The nonprofit Privacy Rights Clearinghouse, privacyrights.org, is another good resource.
Find details of the Maine law covering consumers’ rights when data breaches occur at maine.gov/pfr/insurance/faq/data_breach_faq.htm.
Consumer Forum is a collaboration of the Bangor Daily News and Northeast CONTACT, Maine’s all-volunteer, nonprofit consumer organization. For assistance with consumer-related issues, including consumer fraud and identity theft, or for information, write Consumer Forum, P.O. Box 486, Brewer, ME 04412, visit https://necontact.wordpress.com or email firstname.lastname@example.org.