Cybersecurity blogger Brian Krebs wrote today — a little over a year from his 2022 article describing the same issue — that anyone can usurp someone else’s Experian credit account simply by creating a new account.
He described what happens after you do so, based on his own experience regaining his own stolen Experian account:
After that, your new account is created and you’re directed to the Experian dashboard, which allows you to view your full credit file, and freeze or unfreeze it.
At this point, Experian will send a message to the old email address tied to the account, saying certain aspects of the user profile have changed. But this message isn’t a request seeking verification: It’s just a notification from Experian that the account’s user data has changed, and the original user is offered zero recourse here other than to a click a link to log in at Experian.com.
The AIs are officially out of control
Google apologizes for ‘missing the mark’ after Gemini generated racially diverse Nazis
Google Pay replaced Google Wallet — now it’s going away to make room for Google Wallet
Vision Pro owners are reporting a mysterious crack in the front glass
Spotify HiFi is still MIA after three years, and now so is my subscription