<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p class="MsoNormal" style="margin: 0px; color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);"><span style="font-size:
11pt; font-family: Calibri, sans-serif; color: rgb(31, 73,
125);"><a
href="http://krebsonsecurity.com/2014/04/u-s-states-investigating-breach-at-experian/">http://krebsonsecurity.com/2014/04/u-s-states-investigating-breach-at-experian/</a><br>
</span></p>
<p class="MsoNormal" style="margin: 0px; color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);"><br>
<span style="font-size: 11pt; font-family: Calibri, sans-serif;
color: rgb(31, 73, 125);"></span></p>
So I read the Krebs report today with interest because the CISO of
Experian (Stephen Scharf) is an old friend of mine, and probably one
of the better CISO's in the business, imho. So there are a few
things I think are funny in the Krebs report. For example,<span
style="font-size: 11pt; font-family: Calibri, sans-serif; color:
rgb(31, 73, 125);"> "</span><span style="font-size: 11pt;
font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><span
style="color: rgb(85, 85, 85); font-family: Georgia; font-size:
14px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height:
21.599998474121094px; orphans: auto; text-align: justify;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none;">Court records just
released last week show that Ngo tricked an Experian subsidiary
into giving him </span><em style="margin: 0px; padding: 0px;
border: 0px; outline: 0px; font-size: 14px; vertical-align:
baseline; background-color: transparent; color: rgb(85, 85, 85);
font-family: Georgia; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 21.599998474121094px;
orphans: auto; text-align: justify; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-position: initial initial; background-repeat: initial
initial;">direct access to personal and financial data on more
than 200 million Americans. "</em></span> Right now, using
Google, I have direct access to billions of records on both
Americans and non-Americans But that doesn't mean I downloaded it
and used it. How much data did this guy even get? Something more on
the order of 3 million various things. Likewise, it seems like it
was not Experian's data at all, but the result of some legal
agreements that happened before Experian ever got involved. Also I
love the part in the court documentation where the defendant has
been hearing voices and is basically crazy.<br>
<br>
I guess the point is, "Some random company Experian bought had an
agreement with another company that had an customer who was shady
and then arrested" is not as catchy a title, even if it is more
accurate than "U.S. States Investigating Breach at Experian" which
is what Krebs decided to run with this time.<br>
<p class="MsoNormal" style="margin: 0px; color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);"><br>
</p>
Official Experian response to the whole mess (worth a quick read) is
here:<span style="font-size: 11pt; font-family: Calibri, sans-serif;
color: rgb(31, 73, 125);"><em style="margin: 0px; padding: 0px;
border: 0px; outline: 0px; font-size: 14px; vertical-align:
baseline; background-color: transparent; color: rgb(85, 85, 85);
font-family: Georgia; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 21.599998474121094px;
orphans: auto; text-align: justify; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-position: initial initial; background-repeat: initial
initial;"></em></span><br>
<span style="font-size: 11pt; font-family: Calibri, sans-serif;
color: rgb(31, 73, 125);"><em style="margin: 0px; padding: 0px;
border: 0px; outline: 0px; font-size: 14px; vertical-align:
baseline; background-color: transparent; color: rgb(85, 85, 85);
font-family: Georgia; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 21.599998474121094px;
orphans: auto; text-align: justify; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-position: initial initial; background-repeat: initial
initial;"></em></span>
<p class="MsoNormal" style="margin: 0px; color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);"><span style="font-size:
11pt; font-family: Calibri, sans-serif; color: rgb(31, 73,
125);"><a
href="http://www.experian.com/blogs/news/2014/03/30/court-ventures/"
target="_blank" style="color: rgb(17, 85, 204);">http://www.experian.com/blogs/<wbr>news/2014/03/30/court-<wbr>ventures/</a><br>
</span></p>
<p class="MsoNormal" style="margin: 0px; color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);"><span style="font-size:
11pt; font-family: Calibri, sans-serif; color: rgb(31, 73,
125);"><br>
-dave<br>
<br>
</span></p>
</body>
</html>