Experian Glitch Exposing Credit Files Lasted 47 Days

Experian Glitch Exposing Credit Files Lasted 47 Days

On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer's full credit report -- armed ...
Identity Thieves Bypassed Experian Security to View Credit Reports

Identity Thieves Bypassed Experian Security to View Credit Reports

Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of ...
Experian, You Have Some Explaining to Do

Experian, You Have Some Explaining to Do

Twice in the past month KrebsOnSecurity has heard from readers who've had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn't theirs. In both ...
Phobos ransomware CISA

Experian API Leaked Credit Scores

After Experian fixed a weakness at a partner website that let anyone view credit scores for nearly every American by just inputting a name and address, questions remain about whether the same ...
Security Boulevard
Experian API Exposed Credit Scores of Most Americans

Experian API Exposed Credit Scores of Most Americans

Big-three consumer credit bureau Experian just fixed a weakness with a partner website that let anyone look up the credit score of tens of millions of Americans just by supplying their name ...
Experian’s Credit Freeze Security is Still a Joke

Experian’s Credit Freeze Security is Still a Joke

In 2017, KrebsOnSecurity showed how easy it is for identity thieves to undo a consumer's request to freeze their credit file at Experian, one of the big three consumer credit bureaus in ...
Confessions of an ID Theft Kingpin, Part I

Confessions of an ID Theft Kingpin, Part I

At the height of his cybercriminal career, the hacker known as "Hieupc" was earning $125,000 a month running a bustling identity theft service that siphoned consumer dossiers from some of the world's ...
Why & Where You Should You Plant Your Flag

Why & Where You Should You Plant Your Flag

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. This post examines some of ...
Experian expects deepfake content to create geo-political confusion in 2020

Experian expects deepfake content to create geo-political confusion in 2020

Credit bureau Experian has rolled out the 2020 edition of its annual Data Breach Industry Forecast. The report predicts hackers will increasingly target the political scene and activists using deepfake content and ...