Equifax mistakenly told consumers worried about its data breach to go to a spoof site
Reuters / Brendan McDermid
For more than a week, company representatives have been directing consumers to a fake phishing site instead of to one actually maintained by the credit reporting agency, according to a new report by the Verge. The site - securityequifax2017.com - was specifically created by a software developer to show how easy it would be to spoof the webpage Equifax created to inform consumers about its recent massive security breach, according to the report.
The address of the site Equifax actually set up is equifaxsecurity2017.com.
"I made the site because Equifax made a huge mistake by using a domain that doesn't have any trust attached to it [as opposed to hosting it on equifax.com]," Nick Sweeting, who created the spoof page, told the Verge. "It makes it ridiculously easy for scammers to come in and build clones - they can buy up dozens of domains, and typo-squat to get people to type in their info."
In an emailed statement an Equifax spokesperson told Business Insider: "All posts using the wrong link have been taken down. To confirm, the correct website is https://www.equifaxsecurity2017.com. We apologize for the confusion."
The company did not provide an explanation for how it made such an obvious mistake, particularly at a time when its practices were already under the spotlight after Equifax suffered a massive security breach.
Earlier this month, the credit reporting company acknowledged that a hacking attack compromised the personal data of 143 million US consumers and an unknown number of foreign ones, making it one of the biggest computer security breaches in history. In response to the attack the company set up a site to allow consumers to check to see whether their own data was affected by the security breach.
But at least as early as September 9 - just two days after announcing the hacking attack - Equifax representatives on Twitter were directing consumers to Sweeting's spoof site rather than to the company's own page, according to the Verge. Sweeeny said that he had taken steps to protect the data of consumers who inadvertently ended up at his site.
You can read the full report here.
- I spent $2,000 for 7 nights in a 179-square-foot room on one of the world's largest cruise ships. Take a look inside my cabin.
- Colon cancer rates are rising in young people. If you have two symptoms you should get a colonoscopy, a GI oncologist says.
- Saudi Arabia wants China to help fund its struggling $500 billion Neom megaproject. Investors may not be too excited.
- Catan adds climate change to the latest edition of the world-famous board game
- Tired of blatant misinformation in the media? This video game can help you and your family fight fake news!
- Tired of blatant misinformation in the media? This video game can help you and your family fight fake news!
- JNK India IPO allotment – How to check allotment, GMP, listing date and more
- Indian Army unveils selfie point at Hombotingla Pass ahead of 25th anniversary of Kargil Vijay Diwas