It's been months since the massive Equifax data breach was revealed to the public. It's the largest personal information breach in history and it affects almost half of the entire U.S. population.
We recently told you about the new details that Equifax revealed about the massive breach that it suffered in July 2017.
The company submitted the report earlier this week to the Securities and Exchange Commission and several U.S. congressional committees that are investigating the breach, following mounting pressure from several U.S. senators.
Well, as the new figures revealed, the worst just got worse. It turns out, as massive as it is, the Equifax data breach figures are even bigger than we originally thought.
Staggering new figures
According to the report, aside from the 145.5 million Social Security numbers, around 17.6 million Driver's license numbers, 20.3 million phone numbers, and 1.8 million email addresses were also stolen in the breach.
Even scarier, hackers also managed to steal personal identity images from around 182,000 consumers who uploaded "dispute documents" to Equifax's site. These photos include thousands of driver's licenses images, Social Security and Tax ID images, and passport images.
Other government-issued document images like military and state IDs plus resident alien cards were compromised.
Here's a chart to further illustrate the magnitude of the new figures:
|Data Element||Column||Number of Impacted U.S. customers|
|Social Security Number||SSN||145.5 million|
|Name||First, Last Name, Middle Name, Suffix, Full Name||146.6 million|
|Date of Birth||D.O.B.||146.6 million|
|Address Information||Address, Address2, City, State, Zip||99 million|
|Phone Number||Phone, Phone2||20.3 million|
|Driver's License Number||DL#||17.6 million|
|Email Address (w/o credentials)||Email Address||1.8 million|
|Payment Card Number and Expiration Date||CC Number, Exp Date||209,000|
|Tax ID||Tax ID||97,500|
|Driver's License State||DL License State||27,000|
Personal Images Stolen
In addition, here's a chart of what type of personal images the hackers stole:
|Government-Issued Identification||Approx. # of Images Uploaded|
|Social Security or Taxpayer ID Card||12,000|
|Passport or Passport Card||3,200|
|Other (Includes other types of identification documents such as military IDs, state-issued IDs, and resident alien cards.)||3,000|
Rather than being lifted from a single database, the data apparently came from a number of different databases utilized by various Equifax web applications and payment portals.
The latest figures are also limited to U.S. consumers, even though Equifax stated that people in Canada and the U.K were also affected. This means the numbers could be even worse.
How to protect your identity
With almost half of the number of adult U.S. citizens exposed by the Equifax data breach, it's better to assume the worst and think that the hackers already have your information.
Chances are, if you live in the U.S. and you have a credit card, you are most likely affected. Here are ways to proactively protect yourself:
- Keep an eye on your bank accounts - You should already be frequently checking your bank statements, looking for suspicious activity. It's even more critical when there is a massive data breach. If you see anything that seems strange, report it immediately. It's the best way to keep your financial accounts safe.
- Set up two-factor authentication - Two-factor authentication, also known as two-step verification, means that to log into your account, you need two ways to prove you are who you say you are. It's like the DMV or bank asking for two forms of ID. This is an extra layer of security that will help keep your accounts safe. Click here to learn how to set up two-factor authentication.
- Change your passwords - Whenever you hear news of a data breach, it's a good idea to change your account passwords. This is especially true if you use the same credentials for multiple websites. If your credentials are stolen from a breach, criminals can test them on other sites to log into those accounts as well. Read this article to help you create hack-proof passwords.
- Beware of phishing scams - Scammers will try and piggyback on data breaches like this. They will create phishing emails, pretending to be from the affected company, hoping to get victims to click on malicious links that could lead to more problems. You should familiarize yourself with what phishing scams look like so you can avoid falling victim to one. Take our phishing IQ test to see if you can spot a fake email.
- Set up a credit freeze - If you suspect someone is already pretending to be you, you can lock your credit reports so that no one can open a new account in your name. How does this work? Lenders will consult your credit score before they start a partnership with you. If lenders can’t check those scores, no new accounts can be established. Click here to learn more about how to set up a security freeze.
IN RELATED NEWS, HERE'S THE NEW WAY CROOKS ARE STEALING CREDIT CARD INFO
Credit and debit card skimmers are a perennial modern-day security problem but newer EMV cards are getting harder to clone. However, a new tool called the shimmer has emerged. This one can steal both magnetic stripe and chip data from credit and debit cards. Read more about this devious next-gen device.