topic Re: SSN found on dark web - Discover in General Credit Topics

SSN found on dark web - Discover

CreditMarathoner — Sat, 25 Dec 2021 12:41:06 GMT

I received an email this morning from Discover Credit Scorecard telling me that my SSN was found on the Dark Web.

I logged in to get details and found that my name, old address (where I lived until 2015), two phone numbers (old landline, and work), SSN, and date of birth were found. Date of birth was not shown specifically but it said "D.O.B. found with SSN".

I had a free dark web scan available on Experian so I requested that, and that scan also found my cell # is compromised.

Should I do anything? I keep my credit reports frozen already. I use unique and strong passwords on every website. I went on the IRS website and they offer a I.P. PIN feature for protection but that's unavailable right now until late January probably due to the tax year ending soon.

Of course, to protect the guilty, they don't say who breached the information. Not that that would help anyway.

Any suggestions? Does it help any that it's my old address they got? (probably not, unless they apply for something that verifies current address).

Like virtual card numbers, the USA needs to get with the times and start using virtual SSNs, or some other form of identity that is changeable.

Re: SSN found on dark web - Discover

CreditInspired — Sat, 25 Dec 2021 13:07:45 GMT

Thanks OP for sharing this info. I definitely think you should notift SS and ask what should be done.

Also, I did a search and found this article from the Univ of Berkeley that I found very useful on the steps one should take and Kudos to you for having your reports frozen.
https://news.berkeley.edu/2021/04/27/what-to-do-if-your-social-security-number-was-found-on-the-dark-web/

Re: SSN found on dark web - Discover

CreditMarathoner — Sat, 25 Dec 2021 16:16:16 GMT

Thanks for that link @CreditInspired.

I'm not seeing anything I can do on the IRS website unless my SSN gets used fraudulently, but they do offer the IP PIN security feature, but that's unavailable right now, until January 2022. I'll have to grab one as soon as the New Year hits I guess.

I created a mySocialSecurity login with added security, so (hopefully) no one else can create an account in my name/SSN and mess with my Social Security.

I use Experian's free service along with Credit Karma for checking my reports, plus I get a FICO score from BofA. I also am registered on Discover's site but their credit scores don't work with frozen reports, so I don't log in there. Still, it's their monitoring that alerted me to this breach on the dark web and sent an email.

I could call SS and IRS next week for additional advice, but I think these steps should make me reasonably safer anyway. Get online accounts set up / locked down before someone else does.

Re: SSN found on dark web - Discover

SleeplessinMA — Thu, 10 Feb 2022 19:07:19 GMT

@CreditMarathoner

I was notified yesterday also, first thing I did was contact EQ and place a fraud alert, they informed me they would contact the other two bureaus, EX and TU, and fraud alerts would be placed on those reports too. I have locked my credit reports since the EQ breach in 2017,

only unlocking them when appyling for credit.

If you have an IRS account, they are getting rid of all current user names and you have to set up a new account. I tried to get a PIN but where I have the Fraud Alerts already on my credit reports, I have to have a video chat with a Trusted advisor through ID.me, after getting the requested documents ready. That's an appointment for another day!!

Good luck, as all affected navigate through this.

Re: SSN found on dark web - Discover

sghosh5 — Thu, 10 Feb 2022 22:30:18 GMT

@SleeplessinMA wrote:
@CreditMarathoner

I was notified yesterday also, first thing I did was contact EQ and place a fraud alert, they informed me they would contact the other two bureaus, EX and TU, and fraud alerts would be placed on those reports too. I have locked my credit reports since the EQ breach in 2017,
only unlocking them when appyling for credit.

If you have an IRS account, they are getting rid of all current user names and you have to set up a new account. I tried to get a PIN but where I have the Fraud Alerts already on my credit reports, I have to have a video chat with a Trusted advisor through ID.me, after getting the requested documents ready. That's an appointment for another day!!

Good luck, as all affected navigate through this.

I did the same too. Placed a fraud alert on Experian and they already contacted other bureaus to place alerts there as well

Re: SSN found on dark web - Discover

sghosh5 — Thu, 10 Feb 2022 22:34:32 GMT

@CreditInspired wrote:
Thanks OP for sharing this info. I definitely think you should notift SS and ask what should be done.

Also, I did a search and found this article from the Univ of Berkeley that I found very useful on the steps one should take and Kudos to you for having your reports frozen.
https://news.berkeley.edu/2021/04/27/what-to-do-if-your-social-security-number-was-found-on-the-dark-web/

Thanks. Was able to create Social Security account new and IRS account with ID.me. Pretty cool

Re: SSN found on dark web - Discover

SleeplessinMA — Thu, 10 Feb 2022 23:55:04 GMT

@sghosh5 @CreditMarathoner @CreditInspired

Thank you, CreditInspired for this info. I had already placed fraud alerts on my reports when I contacted Social Security about placing an extra layer of security on my account. Even Social Security cannot get into your account once the fraud report is placed so I am really comforted somewhat.

Re: SSN found on dark web - Discover

Anonymous — Sun, 13 Feb 2022 00:03:52 GMT

I recevived the message from Discover, but also got on from another monitoring service that stated it was from last year's T-Mobile data breach which effects DOB, SSN & DL. Since I had prior indenity theft in the past was already using security precautions mentioned, so thought I was fine until checking a EX credit report that had another SSN associated with my account which I got removed. Make sure you check your credit reports throughly. I also contacted the fraud dept's for Social Security, DMV & file a report to FTC just in case.

Re: SSN found on dark web - Discover

SleeplessinMA — Sat, 12 Feb 2022 01:41:02 GMT

@Anonymous

I did the FTC report this morning, going to take that and file a police report in my town. My license number was compromised, MA stopped using social security numbers for licenses a long time ago, thankfully they didn't get that number. The second alert had my current phone number but another social security number associated with it but I haven't seen that number on any of my reports. Time to take a second look. Best of luck to you.

Re: SSN found on dark web - Discover

Red1Blue — Sat, 12 Feb 2022 01:48:50 GMT

I got an alert from Discover Score card that my SS No is found on the dark web. What course of action I should take.

Re: SSN found on dark web - Discover

Adkins — Sat, 12 Feb 2022 09:55:45 GMT

@Red1Blue wrote:
I got an alert from Discover Score card that my SS No is found on the dark web. What course of action I should take.

I'd freeze all my reports and put a fraud alert on them. You may want to pull your reports and freeze them from secondary reporting agencies, like LexisNexis and Sage Stream.

Re: SSN found on dark web - Discover

Anonymous — Sat, 12 Feb 2022 16:11:58 GMT

Hi,

I also received an email from Discover yesterday saying my SSN was on the dark web. Thank you to everyone for all of the help. When you says file a report with the FTC is it a Fraud Report or a ID Theft Report?

I placed a Fraud Alert on all of my credit reports.
I checked all of my credit reports and so far everything is okay.
I froze all of my credit reports (will be freezing LexusNexus and ChexSystems today).
Signed up for a SSA Account.
Reregistered my IRS account and requested/received an IP Pin.

Will be calling the DMV and SS fraud department on Monday.

Is there anything else that I should do? I wanted to file a report to the FTC but wasn't sure what report to file.

Thank you everyone again for all of the help through this.

Re: SSN found on dark web - Discover

Cowboys4Life — Sat, 12 Feb 2022 16:23:46 GMT

@Anonymous wrote:
Hi,

I also received an email from Discover yesterday saying my SSN was on the dark web. Thank you to everyone for all of the help. When you says file a report with the FTC is it a Fraud Report or a ID Theft Report?
I placed a Fraud Alert on all of my credit reports.
I checked all of my credit reports and so far everything is okay.
I froze all of my credit reports (will be freezing LexusNexus and ChexSystems today).
Signed up for a SSA Account.
Reregistered my IRS account and requested/received an IP Pin.
Will be calling the DMV and SS fraud department on Monday.
Is there anything else that I should do? I wanted to file a report to the FTC but wasn't sure what report to file.

Thank you everyone again for all of the help through this.

Slide over on the bench and make room for me. Got the same alert and did everything as you did. Worse: This is REAL identity theft for me not just an alert this time. Back in January (at the time Discover says they found my SS# on the web) I got an alert from Discover that a charge was being put through for $1200 on a website and did I make it? Ummmm NO! I called their fraud department, they denied the charge and closed that account and issued a new card. Did all the fraud stuff but then the thief tried to move all my loyalty points out of my Marriott Bonvoy account and Marriott got suspicious and blocked the move and notified me of potential fraud and they had opened a case. UGH. Next round of whack-a-thief. Latest update is I got notified by MyFICO that the thief is in Hanover VA (call to website where $1200 charge was attempted verified they intended to ship the goods to Hanover VA and used my name. They cancelled the transaction when Discover denied the charge and tagged it as CC fraud. Attempts to call that "consumer" yielded no response for a week), has made and identity using my SS#, different DOB, and different phone. So far no new accounts and bureaus are frozen with fraud alerts. Police and FACTA reports filed but I am 18 shades of PISSED OFF. Get a job scammers. Stealing from me will NOT be profitable.

Stay vigilant because this may not be the end of it for you.

Re: SSN found on dark web - Discover

SleeplessinMA — Sat, 12 Feb 2022 21:49:56 GMT

@Cowboys4Life @Anonymous

I need a seat on that bench too. I was notified by Citibank about a fraudlent charge on Christmas Day. One for 1.60, limousine service in the UK, 574 and change from Straight Talk, in Florida. Citi blocked both charges, closed and reissued me a new Credit Card Number. Fast forward to Feb 9th, I saw two alerts from MyFico, one with someone elses name, social security number but my accurate cell phone number, the other alert had all my information on it. Was very old, I was living in a place I haven't been since 2010 but had an accurate old landline number. They didn't get my accurate drivers license, MA issued new numbers years ago but it was my social security number they have.

The second report from MyFico, showed some incomplete name and another social security number but listed with my current cell phone number. I am going to have to get ahold of someone at MyFico, and see what I have to do about that one.

As far as the FTC goes, just go to their page and they have a list of things to choose from. I reported identity theft because they placed fraudulent transactions on my report, which Citibank declined.

Fingers crossed, that's all that happens but Cowboy, that's an awful thing you have to deal with. That's a very bold move trying to move your Ioyalty points after the fraud alert had been placed.

I spoke to Social Security, already had an SSA.gov account and they placed a lock on it. I wanted an extra layer of security and tried adding a credit card but the fraud alert had already been placed and even the Social Security rep couldn't access my account. Level of comfort felt there. I already had a Checksystems lock, because of the Equifax breach in 2017, but I didn't even think of Lexus Nexus. I'll be doing that after I send this reply. Where can I file a FACTA report? My next stop will be to the police station, I am overwhelmed by all of this, taking this one day at a time.

Good luck to all of us!

Re: SSN found on dark web - Discover

Cowboys4Life — Sat, 12 Feb 2022 22:03:57 GMT

@SleeplessinMA wrote:
@Cowboys4Life @Anonymous

I need a seat on that bench too. I was notified by Citibank about a fraudlent charge on Christmas Day. One for 1.60, limousine service in the UK, 574 and change from Straight Talk, in Florida. Citi blocked both charges, closed and reissued me a new Credit Card Number. Fast forward to Feb 9th, I saw two alerts from MyFico, one with someone elses name, social security number but my accurate cell phone number, the other alert had all my information on it. Was very old, I was living in a place I haven't been since 2010 but had an accurate old landline number. They didn't get my accurate drivers license, MA issued new numbers years ago but it was my social security number they have.

The second report from MyFico, showed some incomplete name and another social security number but listed with my current cell phone number. I am going to have to get ahold of someone at MyFico, and see what I have to do about that one.

As far as the FTC goes, just go to their page and they have a list of things to choose from. I reported identity theft because they placed fraudulent transactions on my report, which Citibank declined.

Fingers crossed, that's all that happens but Cowboy, that's an awful thing you have to deal with. That's a very bold move trying to move your Ioyalty points after the fraud alert had been placed.

I spoke to Social Security, already had an SSA.gov account and they placed a lock on it. I wanted an extra layer of security and tried adding a credit card but the fraud alert had already been placed and even the Social Security rep couldn't access my account. Level of comfort felt there. I already had a Checksystems lock, because of the Equifax breach in 2017, but I didn't even think of Lexus Nexus. I'll be doing that after I send this reply. Where can I file a FACTA report? My next stop will be to the police station, I am overwhelmed by all of this, taking this one day at a time.

Good luck to all of us!

About 6 years ago my CITI account was hacked and cloned. I got an alert to a $1.75 charge at a vending machine in Manhattan. I clicked NO to the alert and CITI called me within seconds. While on the phone with the fraud CSR she asked if I was in Manhattan at Marshalls trying to buy over $400 worth of merchandise. I was furious and told her no. She blocked the charge and explained they use the card for a small amount to see if the account is active. If it is they use it for as much money as fast as they can before it gets shut down. You had the same issue with them.

I will save you time: MyFICO was no help at all beyond: put fraud alerts and freeze your bureaus. I didn't need them to tell me that. You can file a FACTA identity theft report at the FTC.gov website.

I can't say what caused your issues but I have directly linked mine to the T-Mobile data breach and will be speaking with an attorney first thing on Monday about litigation over this. These companies with little to no site security need to start being held accountable for this garbage that ruins or damages our lives.

Re: SSN found on dark web - Discover

Anonymous — Mon, 14 Feb 2022 01:20:51 GMT

Has anyone recently purchased airline ti lets with their discover card? I did and now i have 24 alerts for my SSN on the dark web.

@Anonymous wrote:
Hi,

I also received an email from Discover yesterday saying my SSN was on the dark web. Thank you to everyone for all of the help. When you says file a report with the FTC is it a Fraud Report or a ID Theft Report?
I placed a Fraud Alert on all of my credit reports.
I checked all of my credit reports and so far everything is okay.
I froze all of my credit reports (will be freezing LexusNexus and ChexSystems today).
Signed up for a SSA Account.
Reregistered my IRS account and requested/received an IP Pin.
Will be calling the DMV and SS fraud department on Monday.
Is there anything else that I should do? I wanted to file a report to the FTC but wasn't sure what report to file.

Thank you everyone again for all of the help through this.

Re: SSN found on dark web - Discover

SleeplessinMA — Mon, 14 Feb 2022 03:35:59 GMT

@Cowboys4Life

According to Experian credit reporting, it was from the TMobile breach that occured last year.

Personal info on darknet

Tiberius800 — Thu, 17 Feb 2022 20:16:38 GMT

I got an email from my capital one. They said my personal info was found on the darknet. It shows last four digits of my SSN but all the other info is not mine. Not my name or address. How should I respond to this? Am I at risk?

Re: Personal info on darknet

Anonymous — Sat, 19 Feb 2022 20:58:50 GMT

Pretty much EVERY US citizens SSN/D.O.B./former address is on the dark web. The equifax data breach along with several other major breaches (linkedin, target, etc...) Have leaked all of the private information.

There is nothing you can do about it, nor should you really be all that alarmed. Identity theft/fraud on your SSN/Name is a "when" not "if" proposition. Finance companies, banks, credit bureaus are all aware of this and quick to reverse anything fraud related. the worst the typically happens is you have to deal with a mess for a future weeks before funds are returned or scores reverted.

Much more damage is a password breach. likely your passwords were made public during a major breach. Make sure to have a unique password for every site you log into and setup 2-factor authentication on everything,

Re: Personal info on darknet

Caribsa89 — Mon, 21 Feb 2022 04:59:08 GMT

So a few weeks before I received the alert from Experian IdentityWorks that my info was on the dark web due to the T-Mobile breach, an unknown address in NY showed up on my credit report via Experian. It was a funny address with no street number (na , schenectady ny 123450001). I disputed and had it removed. I have since frozen my credit reports and Chexsystems. I don't see any hard inquiry or soft that look suspicious. I am hoping it was a coincedence.