FTC takes action against CafePress for data breach cover up

Re:FTC takes action against CafePress for data breach cover up by adrr on Monday June 27, 2022 @05:20PM (#31900955)

Fines or threat of jail time is just trying treating the symptoms. Bigger issue is that companies use SSN as a way to authenticate a user. Government should mandate only allowing SSN for tax identification purposes. Passwords need to go away and with webauth, we are almost there. The average person is re-using the same password across sites so it’s pointless protection.

An e-commerce store hack shouldn’t give hackers the data needed to access customers financial accounts.

[ Parent | on HN ]

Re:FTC takes action against CafePress for data breach cover up by 4oh9do on Monday June 27, 2022 @05:27PM (#31901035)

> Government should mandate only allowing SSN for tax identification purposes.

CafePress was presumably collecting SSNs precisely for tax identification purposes.

[ Parent | on HN ]

Re:FTC takes action against CafePress for data breach cover up by adrr on Monday June 27, 2022 @06:04PM (#31901455)

It's not them who are the problem. Its financial institutions and other services that use SSN as way to verify a person. You should not be able to setup a cell phone plan by providing a name and a SSN. And credit reporting should not be tied to a SSN. It should just be used to submit tax information to the government and have no value beyond that.

[ Parent | on HN ]

Re:FTC takes action against CafePress for data breach cover up by lesuorac on Monday June 27, 2022 @06:28PM (#31901711)

And when a company doesn't comply?

A law without a penalty isn't a law you need to follow.

[ Parent | on HN ]