topic Re: Guidance Requested: SSN showing on 'dark web' in General Credit Topics

Guidance Requested: SSN showing on 'dark web'

_KeepingScore_ — Mon, 09 Sep 2024 21:09:30 GMT

Hello,

I haven't posted in several years, so looks like I am a newb again. I appreciate any help you folks may be able to offer.

About 2 weeks ago, I got an alert from Discover of a pending charge for $1 that I knew wasn't mine. I immediately had them cancel/replace my existing card, to be safe. Today, Capital One notified me that my SSN was found on the 'dark web' and of course, I freaked. I put a freeze on all three credit bureaus right away. My cards are never out of my sight and I don't frequent seedy gas stations or sketchy websites to handle my business, so I am stupidly, ridiculously careful about where my info goes. However, I know that there is only so much I can do as there seems to be a breach weekly.

I have (4) cards other than the Discover (3 CapitalOne + 1 Amazon), in addition to my standard banking card. Should I change account passwords and request new cards for all of those, or am I really being paranoid? Should I go farther than that?

Thank you kindly for reading.

Re: Guidance Requested: SSN showing on 'dark web'

FireMedic1 — Wed, 11 Sep 2024 07:26:21 GMT

Changing passwords is fine. Freeze your reports.

Re: Guidance Requested: SSN showing on 'dark web'

Snook_on_the_Line — Thu, 12 Sep 2024 02:08:53 GMT

Maybe freeze your chexsystems reports also so deposit accounts can't be opened in your name

Re: Guidance Requested: SSN showing on 'dark web'

Im-back — Tue, 17 Sep 2024 03:51:12 GMT

With the recent data breach of millions of records many of us are now on the dark web.

Re: Guidance Requested: SSN showing on 'dark web'

AndySoCal — Tue, 17 Sep 2024 13:46:54 GMT

@Im-back @You could also setup an account with social security administration.

Re: Guidance Requested: SSN showing on 'dark web'

Aim_High — Tue, 17 Sep 2024 22:03:23 GMT

@_KeepingScore_ wrote:
About 2 weeks ago, I got an alert from Discover of a pending charge for $1 that I knew wasn't mine. I immediately had them cancel/replace my existing card, to be safe. Today, Capital One notified me that my SSN was found on the 'dark web' and of course, I freaked. I put a freeze on all three credit bureaus right away. My cards are never out of my sight and I don't frequent seedy gas stations or sketchy websites to handle my business, so I am stupidly, ridiculously careful about where my info goes. However, I know that there is only so much I can do as there seems to be a breach weekly. I have (4) cards other than the Discover (3 CapitalOne + 1 Amazon), in addition to my standard banking card. Should I change account passwords and request new cards for all of those, or am I really being paranoid? Should I go farther than that?

Welcome back, @_KeepingScore_.

Like many of us, you may have been involved in a **HUGE** recent data breach. This does not appear to be just any ordinary data breach. It's in a league of it's own for the breadth or data and consumers affected. Websearch the "National Public Data" breach from August 2024. There are posts on this forum and Reddit about it, as well as tons of news articles.

You can see your exposed data HERE.

You've started by freezing your credit reports. Good job.

Immediately change all passwords for financial data and credit reporting. Make sure they are complex and don't repeat between accounts. Consider using a password manager software program to create and manage unique passwords.

Set up multi-factor login authorizaton or biometric login on all accounts that you can do so.

Create an account with the IRS and put your tax filing on a PIN protection. This keeps someone from claiming your refund if they file before you do.

Create an account with the Social Security Administration to verify your benefits haven't been accessed and to prevent someone else from setting up an account in your name.

In my case, I had my current physical address, my mailing address (PO Box), phone number and email address published. Of course, I'm not going to move but my financial data goes to my PO Box for security. I may change the box number. I'm considering changing my phone number, although that is a huge hassle. I use a separate email address for financial accounts already and fortunately it was not published, just my everyday "spam" email. My email provider allows for setting up additional email aliases which can later be blocked without shutting down the account. I'm considering using more of those to protect my core email account. If a fraudster tries to use any of this published data, it would no longer be useful to setting up a new account or accessing my existing accounts or data.

It might not have been necessary but I went to most of my card accounts that weren't used frequently and locked/froze the cards. It's easy to do with most lenders and helps prevent new charges from processing unless they are on a recurring subscription.

There is a posting on REDDIT that has a checklist of sorts of many large national data aggregaters (including Lexis Nexis and Chex Systems) where you can retrieve your report, opt out, or even remove all your data. Go HERE for that checklist.

See these other My FICO threads for other related links and suggestions. Good luck!

Time.com: Check if Your Info Was Compromised in the Data Breach (@Anonymous)
I finally did it. (@Aim_High)

Re: Guidance Requested: SSN showing on 'dark web'

Tdatb64 — Sun, 22 Sep 2024 05:42:09 GMT

My name, SSN, and last 25 years of addresses show up in that breach, as well as several correct former phone numbers. Every record that has a birthdate listed, however, has an incorrect one. I froze my reports as soon as I saw my info here:

https://npd.pentester.com/

Re: Guidance Requested: SSN showing on 'dark web'

MikeB4 — Mon, 23 Sep 2024 01:45:49 GMT

@Tdatb64 wrote:
My name, SSN, and last 25 years of addresses show up in that breach, as well as several correct former phone numbers. Every record that has a birthdate listed, however, has an incorrect one. I froze my reports as soon as I saw my info here:
https://npd.pentester.com/

Same here I saw all my past addresses on here and did the same

Re: Guidance Requested: SSN showing on 'dark web'

AndySoCal — Tue, 24 Sep 2024 04:37:16 GMT

@Tdatb64 @MikeB4 I would also freeze my Chex systems report so that they cannot open new deposit accounts in your name. I would also if you have not done so already set up an account with the social security administration and ID me account with the IRS.