Re:Equifax Breach Caused by Lone Employee’s Error, Former CE...
by WalterBright on Tuesday October 03, 2017 @11:46PM
(#15398126)
> One good step would be to prohibit the use of social security numbers for anything other than social security.
That's already true, it's just ignored and not enforced.
Re:Equifax Breach Caused by Lone Employee’s Error, Former CE...
by AnthonyMouse on Tuesday October 03, 2017 @11:59PM
(#15398170)
> That's already true, it's just ignored and not enforced.
That should make it easier to start punishing people for doing it then.
Even if the penalty was only a $100 fine, multiply that by 320 million counts and it turns into real money.
Equifax is a special case though. It isn't Equifax that needs to be killed, it's the concept of credit reporting agencies in general -- they inherently constitute systemic risk. The more private information is concentrated in one place, the more attractive a target it creates for attackers and the more severe the consequences of a breach.
We need to figure out a way to make data warehousing operations like this impractical so these dangerous targets no longer exist.
One good step would be to prohibit the use of social security numbers for anything other than social security.