While this is alarming, SSNs have been defacto public for a while because of numerous other breaches. Any institution issuing credit on the sole basis of SSN number + other easily aquired demographics is negligent. The burden of "Identify theft" should at this point is no longer on the victim but the defrauded institution.
0xC0ncord•1h ago
> The burden of "Identify theft" should at this point is no longer on the victim but the defrauded institution.
This is how it's always been, but the lack of any real privacy protection laws in the US allows institutions to wipe their hands clean of any negligence when they can just blame the affected individuals. Better, the defrauded institution can just offer "free" "credit monitoring" that they themselves created.
catigula•1h ago
This could unironically be an onion article title.
valiant55•1h ago
0xC0ncord•1h ago
This is how it's always been, but the lack of any real privacy protection laws in the US allows institutions to wipe their hands clean of any negligence when they can just blame the affected individuals. Better, the defrauded institution can just offer "free" "credit monitoring" that they themselves created.