this post was submitted on 05 Jun 2025
90 points (100.0% liked)

Cybersecurity

7394 readers
119 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
top 15 comments
sorted by: hot top controversial new old
[–] ramble81@lemm.ee 28 points 2 days ago (2 children)

I’ve already accepted my name, dob and ssn are already out there from other breaches. One thing I immediately did was freeze my credit. It’s a good safeguard to have

[–] IllNess@infosec.pub 7 points 2 days ago (1 children)

Everyone in America should freeze their credit with all three major credit reporting agencies.

Do it for your children also, even if they never used their credit for anything.

Breaches are part of life now.

[–] timbuck2themoon@sh.itjust.works 4 points 1 day ago (1 children)

Freeze chex and lexis nexus and those too. Keeps people from opening bank accounts in your name.

[–] IllNess@infosec.pub 2 points 1 day ago

I never heard of these. Thank you for the info.

[–] Ledericas@lemm.ee 1 points 1 day ago

they made it easier to freeze on the big 3 credit bearaus, when it was much harder to do when the equifax breach happened.

[–] Bob_Robertson_IX@discuss.tchncs.de 20 points 2 days ago (2 children)

Why does AT&T have customer SSNs?

I mean, I get that they need those in order to run credit checks... but once the credit check has been run they have no need to keep that data.

We need REAL data protection laws that make even the largest corporations afraid to keep user data for any longer than absolutely necessary.

[–] higgsboson@dubvee.org 11 points 2 days ago (1 children)

ATT does financing for phones, etc. Presumably that is why.

[–] Kbobabob@lemmy.world 3 points 2 days ago (1 children)

Ok, so you need the SSN for the credit check and what else after?

[–] nickwitha_k@lemmy.sdf.org 1 points 1 day ago

To leak to criminals.

After phones became de-coupled from street addresses (landline), the whole system changed to do everything possible to identify who has what number. It may or may not have something to do with law enforcement requests for wire taps and metadata. You have to hand all this information over, even if you bring your own phone.

That said, burner phones with cash-paid SIMs are probably (?) still a viable workaround, however tedious.

[–] sturger@sh.itjust.works 10 points 2 days ago* (last edited 2 days ago)

"It is not uncommon for cybercriminals to re-package previously disclosed data for financial gain. We just learned about claims that AT&T data is being made available for sale on dark web forums, and we are conducting a full investigation.”

Translation: "We have no information whatsoever. Based on our complete lack of information, we feel confident is saying this isn't our fault. This sort of leak could not have been foreseen by anyone, it's not our fault. While we 'investigate', we'll continue business as usual -- taking in large sums of money, demanding all customer private information for even the most trivial service, store that PII insecurely, paying our C-Suite insane amounts of money for failing to keep customer data securely and claiming that there is nothing else we can do. Regards, Customer Service."

[–] NotAGamer@lemmy.org 6 points 2 days ago (1 children)
[–] Buske@lemmy.world 7 points 2 days ago

3.50$ incoming.

[–] Sgt_choke_n_stroke@lemmy.world 3 points 2 days ago* (last edited 2 days ago) (1 children)

You might as well start faking you ssn for companies like this since they can't keep anything safe

[–] celeryfc@sh.itjust.works 2 points 1 day ago

Would that even work? Like have your actual social that you use for government services and a second made up ssn that you use for private companies? I think they cross reference and you’d get denied for a bunch of things.