cancel
Showing results for 
Search instead for 
Did you mean: 

Experian API Leaks Most Americans’ Credit Scores

donotpassgo
Valued Member

Experian API Leaks Most Americans’ Credit Scores

A researcher is claiming that the credit scores of almost every American were exposed through an API...

 

The tool, called the Experian Connect API, allows lenders to automate FICO-score queries. Bill Demirkapi, a sophomore at Rochester Institute of Technology, was shopping for student loans when he found a lender that would check his eligibility with just a name, address and date of birth, according to a published report.

 

“No one should be able to perform an Experian credit check with only publicly available information,” Demirkapi told Krebs On Security, which was the first to break the story of the leak. “Experian should mandate non-public information for promotional inquiries, otherwise an attacker who found a single vulnerability in a vendor could easily abuse Experian’s system.”

 

Demirkapi said he was even able to build a command-line tool that let him automate lookups, even after entering all zeros in the fields for date of birth, which he named, “Bill’s Cool Credit Score Lookup Utility.”

 

In addition to raw credit scores, Krebs said that he was able to use the API connection to get “risk factors” from Experian that explained potential flaws in a person’s credit history. He ran a credit check for his friend “Bill” which returned the explanation for his mid-700s credit score that he had “Too many consumer-finance company accounts.”

 

Message 1 of 11
10 REPLIES 10
Azza
Regular Contributor

Re: Experian API Leaks Most Americans’ Credit Scores

Crazy.

 

Or at this point, is it?

 

 

Currently Reporting:



Current Score:

Gardening Started with:


Message 2 of 11
babygirl1256
Frequent Contributor

Re: Experian API Leaks Most Americans’ Credit Scores

Wow . . . like we really need another issue to slow down our attempt to improve our credit. It's already sometimes a challenge to deal with the Credit Reporting Agencies . . . or at least it is for me. I hope it has been thoroughly fixed! 

Starting FICO 8 Score in 06/2019: EQ-625, TU-649, EX-640
Current FICO 8 Score in 04/2021: EQ-781, TU-781, EX-734
Goal FICO 8 Score in 06/2022: EQ-800, TU-800, EX-800
Message 3 of 11
KatSoDak
Regular Contributor

Re: Experian API Leaks Most Americans’ Credit Scores

He ran a credit check for his friend “Bill” which returned the explanation for his mid-700s credit score that he had “Too many consumer-finance company accounts.”

 

Haha, I feel for ya "Bill". That darn CFA code.


 



Citi | Discover | HSBC | BOA (2) | NFCU | WF (2) | Simmons Bank | FNBO (2) | BBVA | Lowes | Care Credit | Home Depot AU
Message 4 of 11
designated_knitter
Established Contributor

Re: Experian API Leaks Most Americans’ Credit Scores

Of course, the worst part of this is that the API back door may still be active and by posting this story, even mor malicious actors will use it.

 

I wouldn't be surprised if more agencies have similar APIs and all information is really just wide open!

Started Over Again after Cap1 Death Penalty:
06/15/2019:
03/02/2021:
04/06/2021:
Lesson Learned: DON'T POKE THE BEAR!!! THE BEAR WILL WIN!!!
Message 5 of 11
Saeren
Mega Contributor

Re: Experian API Leaks Most Americans’ Credit Scores


@designated_knitter wrote:

Of course, the worst part of this is that the API back door may still be active and by posting this story, even mor malicious actors will use it.

 

I wouldn't be surprised if more agencies have similar APIs and all information is really just wide open!


The article says that Experian closed the back door. 





Message 6 of 11
805orbust
Frequent Contributor

Re: Experian API Leaks Most Americans’ Credit Scores

I love how it's so easy for them and even "Bill" to get our private information but let us try to alert them to an inaccurate item and Fort Knox is closed for lockdown.

FICO 8:  EQ:738  TU:767  EX:738
Message 7 of 11
Saeren
Mega Contributor

Re: Experian API Leaks Most Americans’ Credit Scores


@805orbust wrote:

I love how it's so easy for thrives and even "Bill" to get our private information but let us try to alert them to an inaccurate item and Fort Knox is closed for lockdown.


Haha for real! 😂 





Message 8 of 11
Girlzilla88
Valued Contributor

Re: Experian API Leaks Most Americans’ Credit Scores

@Saeren    Do you think this is in any way connected with my EX updating slow this month normally by now I would have 2 or 3 updates at least for my EX and nothing has flipped over to May yet.....?!?     










Message 9 of 11
Saeren
Mega Contributor

Re: Experian API Leaks Most Americans’ Credit Scores


@Girlzilla88 wrote:

@Saeren    Do you think this is in any way connected with my EX updating slow this month normally by now I would have 2 or 3 updates at least for my EX and nothing has flipped over to May yet.....?!?     


Nah I doubt it. Mine updated like normal this month. 





Message 10 of 11
Advertiser Disclosure: The offers that appear on this site are from third party advertisers from whom FICO receives compensation.