Stolen SSN, Credit Bureaus Alerted , Now What? 42
privacyIntruded asks: "Recently I was informed by a former employer that a computer containing my name, address, drivers' license information, and social security number had been hacked. Though they do now know what, if any, information was accessed on the computer, they recommended I place a fraud alert on my credit report. To my relief, after placing the alert, I received credit reports that look fine. Now what? Assuming that someone does have the information, do I just wait for the day when someone uses the information for fraud, then hope I can minimize the damage when it is? Is there anything I can do to reduce the risk?"
buy more stuff from them. (Score:2, Interesting)
Re:buy more stuff from them. (Score:3, Interesting)
SSNs are NOT unique (Score:2)
The SSN is not unique to each individual. http://www.epic.org/privacy/medical/ssn_letter.txt [epic.org]
Re:New Credit Card Number (Score:2)
Why does he need a new credit card?
Re:New Credit Card Number (Score:2, Insightful)
News for nerds?? (Score:4, Insightful)
Good luck anyway - I hope that nothing bad happens to your credit.
Re:News for nerds?? (Score:2)
Or, more accurately, about what to do if someone mugs you (i.e., uses your pants as a vector to steal money).
well (Score:5, Informative)
Inform people this happened, so they don't become victims too. If something had been used already, talk to whoever is in change (if your bank acocunt has been broken in to, the banks will often give you a paper to sign saying they will incur any damages as long as you don't sue them).
There may also be a victim support group somewhere to attend if you are mentally distrought, but since you are on the internet, I'm sure you have gotten around to accepting you ahve no privacy by now.
Here is a list (Score:4, Informative)
- Invent a new set of 4 passwords. Make them impossible to guess, 8 chars with upper and lowercase, NOT WORDS!, and at least two nonsequential numbers. Something like "FjW7zk2a". Don't practice typing them until you fix your box (see below). Create a paper list of them, memorize them well, then once you can remember them easily for 2 weeks (vital for long term memory), destroy the list or put it in a safe deposit box.
- Invent a further password that you can use all the time, that you know to be a 'dumb' password that you use to log into websites like slashdot or imdb. Make sure you only use the dumb password for dumb applications, and the good ones (above) for stuff like signing in to your online brokerage or bank's transfer-money-type-website.
- Fix your box or get a new one. Make sure it has Norton or MacAfee Antivirus on it, plus a good firewall, plus AdAware's SpyAssasin (recognized as best by most of my group of IT/InfoSec friends). Only when your box is secure should you do any online activity.
- Call your credit card companies and request a new card from each of them. Tell them you believe your card number has been compromised and wish a new card.
- While you're on the phone with your credit card companies, tell them you add an additional password to your account that they must request and you must provide whenever you talk with them. Chase and Discover at least both do this and have honored my request for it. This adds quite a bit of new security to your account.
- Visit your bank, and close your existing accounts. Transfer the money to at least two new accounts. One of those accounts should NEVER EVER have any EFT (electronic fund transfer) transactions into/out of it. If your bank allows it, request that the account type prohibit that kind of activity. The other account should be an everyday checking or savings account that you can have the EFT's done with.
- You mentioned contacting the credit bureaus and having a fraud listing attached to your account. This is good; it is free and effective.
- If you currently have a Debit card, cut it up. Ask your bank for a card that ONLY does ATM transactions and nothing else. You are NOT protected if a debit card is stolen or misused - your money is GONE. Credit card companies protect you from paying more than $50 if a card is stolen / misused.
- Re-read your last 6 months of credit card bills. Make sure you understand each charge on it. This allows you to have the familiarity to immedately spot fraudulent charges on your bill(s) and thus to react more quickly if there is a problem.
- If you feel it necessary, there are companies out there who will do credit reports daily (if not the credit bureaus themselves) and email you if there is any significant activity (new accounts opened, etc., something goes to a collection agency, etc.). This service will probably cost you about $200 per year or so, but might be worth it for your peace of mind.
Just some ideas. Best of luck to you.Re:Here is a list (Score:5, Informative)
Not true. See here [kiplinger.com]. Granted, credit cards have a broader umbrella then debit cards, but there are protections in place - the Visa and MC "zero-liability" apply to debit cars these days as well. It's tougher to dispute a debit purchase vs a credit purchase, but's its definately doable.
Credit cards. Under federal law, if someone steals your credit card you're only responsible to pay the first $50 of unauthorized charges. And, says FTC lawyer Carol Reynolds, if you notify the issuer before the thief makes any charges, you may not be out anything. You're also free from liability if unauthorized purchases occur when the card is not physically present, say in an Internet purchase, she says.
Zero-liability policies, like those offered by Visa and MasterCard, add a second layer of protection. Under these programs you won't pay anything if someone fraudulently uses your credit card online or off.
Debit cards. The rules are similar for debit cards, but there are a few restrictions. For example, your liability under federal law is limited to $50, but only if you notify the issuer within two business days of discovering the card's loss or theft. Your liability could jump to $500 if you put it off. And even this cap is lifted if you wait more than 60 calendar days from the time your bank statement is mailed.
Federal protections are a bit more generous if a thief just steals your debit card number (and not the actual card), but you still have 60 days after receiving your bank statement to report any unauthorized transactions.
The Visa and MasterCard zero-liability policies also apply to debit cards, but only to non-PIN transactions. If a thief steals your card and your PIN, the federal rules are your only defense.
For additional protection check your homeowners or renter's insurance policy. Most cover up to $500 for losses from unauthorized card use.
Also, get a new SSN issued and have the old marked as fradulent. It will prevent any new credit cards or loans being created in your name and destroy your credit
Re:Here is a list (Score:2)
Wrong. (Score:5, Informative)
The SSA has a new publication on what to do When Someone Misuses Your Number discussing Identity Theft in general terms. It says If you can prove that you're being disadvantaged because someone used your Social Security number, visit your local Social Security office to request a new one. If you've done all you can to fix the problem and someone is still using your number, under certain circumstances, we may assign you a new number. which seems not to promise anything, and to leave the discretion in the hands of the local office. They do recommend that you file a report with both Social Security Fraud Hotline at 1-800-269-0271 and the FTC.
Re:Here is a list (Score:5, Informative)
Getting a new Social Security number
If you have done all you can to fix the problem and someone still is using your number, we may assign you a new number. We cannot guarantee that a new number will solve your problem.
You cannot get a new Social Security number if:
* You filed for bankruptcy;
* You intend to avoid the law or your legal responsibility; or
* Your Social Security card is lost or stolen, but there is no evidence that someone is using your number.
Re:Here is a list (Score:5, Interesting)
Furthermore, there is a rule that if you and another family member in your immediatly family have a SSN that differs by only a single digit, the gov't has to let you request a new one. (Notice, that's a single digit, not numerically next to each other). In my family, we have 3 out of 4, but they end in 07, 09 and 10 (actually, now that I've re-read the rule, we might qualify, they say sequential). So we nearly qualified for the rule. Having the first 7 digits and a last name match does create problems for credit reporting companies. Did I mention that there are 5 kids in my family, and we all have names that start with "K". They skipped the 08 one intentionally so that we would not not have sequential ones. So I'm not sure if I am interpreting the rule correctly or not.
http://www.lawsmart.com/ssfaqs/sscards.html
That even references the documentation for the form that you request to have your SSN number changed.
http://ssa-custhelp.ssa.gov/cgi-bin/ssa.cfg/php/en duser/std_adp.php?p_sid=A5OT3Wmh&p_lva=77&p_li=&p_ faqid=79&p_created=955483070 [ssa.gov]
That link has my session in it, the FAQ is FAQ id 79, and is in the Social Security Number and Cards, the sub-category is General- SSNs and Cards. If you look around you'll find it. The following are the criteria:
If I didn't have nearly perfect credit, I'd apply to change it just because there are members of my family who know my SSN, whom I wish didn't. Members of my family are nearly indistingishable on the phone from me. Even by other close relatives.
I'd like to see the reference material on non-special SSN's that get re-issued. The SSO has special procedures to ensure that they aren't re-issued for long periods of time after someone is dead. According to the FAQ, no SSN has ever been re-issued (some of the 000-XX-XXXX specials get reused). The SSN has only assigned 450Million of the 1Billion available. In the FAQ search for an entry with the word "died", it'll be one of the first few.
Got any more urban legends you'd like me to debunk?
Sorry that I can't provide direct links, but the site doesn't give them back. You have to have the cookies and goop hooked up to it.
I read up on the rules about SSN's at great length when slashdot posted the story about the man who doesn't have an SSN. There are all sorts of neat rules about them. The IRS is a serious pain to deal with because of it, but it can be done.
Kirby
Re:Here is a list (Score:2)
I was under the impression this was under the discretion of the bank you're with. Am I mistaken? (Note: The context of your link is about federal law...)
Re:Here is a list (Score:4, Informative)
Personally, I think the credit card companies have a lot to do with people thinking they have zero protection. Granted, a debit card isn't as safe as a credit card, but it's not as risky as a lot of people like to think.
Re:Here is a list (Score:1)
Re:Here is a list (Score:2)
I always keep 200 in my checking for my debit card, the rest stays safely away in savings.
I dispute your #8 as wrong... (Score:2)
see the visa's zero liability policy [visa.com] The Zero Liability policy covers all Visa credit and debit card transactions processed over the Visa network--online or off. The only transactions not covered under the Zero Liability policy are commercial card, ATM, and non-Visa-branded PIN transac
In three months (Score:5, Informative)
I had the same thing happen to me last year. We had a break-in at the firm which handled my last company's payroll, which later turned out to be an inside job. Fortunately, I haven't had any problems, and I hope you don't either.
I can help you figure out what to do . . . (Score:3, Funny)
Equifax Identity Theft Protection (Score:3, Interesting)
I recommend that everyone does this these days. Your information is out there and easily collected by those that want it. Your information IS NOT safe.
Re:Equifax Identity Theft Protection (Score:1)
Where do you work? (Score:1, Funny)
You wouldn't happen to work at the Bush Campaign Offices [slashdot.org], would you? =)
What to do When Your SSN is Compromised (Score:4, Informative)
For those of us not as unlucky as the original poster, there is a lot of information available at EPIC [epic.org]
You've already done what you need to do.... (Score:2)
You are done... now it is up to your credit companies to deal with unlawful inquiries... you put them on alert that you may have unwanted access happening.
If they want to minimize their own risk they will issue you new cards, etc.
you have reported... you can now request new cards and move on....
that's it... fairly simple...
-james
Just a few more things (Score:1, Interesting)
In
What to do. (Score:2)
2. Goto the bank and have them transfer your money into new accounts and have them issue you new a ATM/debit card and checks.
3. Also have your bank restrict the types of EFT's that can be done to your account.
4. Have a new credit card issued and ask that your account be assigned a password.
5. Contact the company that your 401k and have modify your account so that only in person can any withdrawls or wiring of money can occur.
SSN and Imports (Score:1)
It use to be that was only required on shipments over $1000 but now it's required on all shipments. So you government isn't helping the situation.
Re:SSN and Imports (Score:2)
MM
--
Re:SSN and Imports (Score:1)
Fedex Note about it [fedex.com]
Re:SSN and Imports (Score:1)
Change your SSN (Score:2)
The biggest thing to watch for (Score:2)
Mistaken Identity is probably a bigger problem than Identity theft, there is a woman localy, who's first name, last name and middle initial is the same as my wife's, who's SSN is one digit different, who's driver's license is one digit different and she seems to like bouncing checks and not paying taxes or hospital bills.