Recently, Attorney General Keith Ellison shared practical guidance about responding if your information is exposed in a data breach.
“Data breaches are becoming an unfortunately common occurrence in our highly connected world,” Ellison said. “While my office works hard to hold companies accountable when their security failures expose Minnesotans’ private information, that cannot undo the harm caused by a data breach.
“As such, it is important for Minnesotans whose information is exposed to take some early steps to mitigate that harm, protect themselves, and make things harder for scammers and thieves.”
How the scams work
Data breaches can lead to a wide variety of scams. Information that’s stolen in a breach can include usernames, passwords, email addresses, phone numbers and addresses, dates of birth, credit and debit card numbers, social security numbers, and much more.
Frequently, thieves target victims with good credit and use their personal information to open a wide variety of new accounts, including credit cards, utility accounts, checking accounts, and more. The thieves skip out on the bills, and creditors unknowingly pursue the victims and destroy their credit in the process.
Other bad actors may use information they collect in what’s called phishing — a form of scam where the scammer pretends to be someone else to trick their victim.
Scammers may pretend to be from the breached organization to steal more information by, for example, asking people to confirm account numbers or other personal financial data to “check for fraud.”
If data is exposed?
If you learn that your private information was released as the result of a data breach, here are some reasonable steps to take to protect yourself.
Change your passwords and switch to two-factor authentication
It is important to change your passwords if your data is breached, especially on online banking platforms, commerce platforms like Amazon and Etsy, and communications platforms like your email account and Facebook. This is particularly important if you have used the same password in multiple places, which is less secure than using a separate password for every platform.
It is also a good idea to set up two-factor authentication, which requires an additional layer of security to sign into a website or app. For example, a two-factor authentication system may require a password and for you to enter a code delivered by call, email, or text message.
Call the three major credit bureaus and place a one-call fraud alert on your credit report
• Experian: Call (888) 397-3742, and write P.O. Box 9554, Allen, TX 75013
• Equifax: Call (800) 525-6285, and write P.O. Box 105069, Atlanta, GA 30348-5069
• TransUnion: Call (800) 680-7289, and write P.O. Box 2000, Chester, PA 19016
You only need to call one of the three credit bureaus. The one you contact is required to contact the other two to place the fraud alert in your credit file. This fraud alert will remain in your credit file for at least one year.
The fraud alert requires creditors to contact you before opening any new accounts or increasing credit limits on your existing accounts. When you place a fraud alert on your credit report, you are entitled to one free credit report from each of the three credit bureaus upon request.
Security freeze
Under state law, Minnesota consumers can place a security freeze on their credit reports.
In most instances, the freeze prohibits a credit reporting agency from releasing any information from your credit report without your written authorization. (Before placing a security freeze on your credit report, consider that a freeze could delay, interfere with, or prevent the timely approval of any requests you make for new loans, mortgages, employment, housing or other lines of credit).
You can place a security freeze on your credit report for free, and a parent or guardian may freeze the credit report of a child under the age of 16 at no cost as well.
Visit the following websites to place a security freeze on your credit report:
• Experian Security Freeze www.experian.com/freeze
• Equifax Security Freeze
https://www.equifax.com/personal/credit-report-services/credit-freeze
• TransUnion Security Freeze http://www.transunion.com/credit-freeze
Monitor your financial accounts for suspicious activity
Look carefully for unexplained activity on your bank and other financial statements. If after reviewing your statements you believe there is unexplained activity, you may want to contact the fraud department of your financial institution.
Beware of phishing
In large data breaches, scammers may pretend to be the organization that was subject to the data breach, or even a law enforcement agency, in order to dupe consumers into disclosing sensitive personal information.
When in doubt, don’t give it out. Contact companies through trusted channels. If you are concerned about receiving such an email, call the company immediately at the publicly listed phone number. Don’t trust the number or email in the message.
Contact the FTC
The Federal Trade Commission maintains an Identity Theft database, monitors identity theft nationwide, educates consumers on the crime, and works with other law enforcement officials. Consumers may contact the FTC as follows:
• Federal Trade Commission Bureau of Consumer Protection (877) 382-4357 www.consumer.ftc.gov
Share your scam story
Local law enforcement is concerned about the impact of scams on area residents, particularly the elderly.
Consequently, this newspaper works with local police and sheriff’s departments to keep residents updated on common schemes. Scam Alerts will appear in future editions as often as possible in the coming weeks.
Readers can also find online scam updates weekly at windomnews.com.
If you have been the target of a scam, your first contact should be local authorities. Also, feel free to contact us with details (we can keep your name confidential).
Send your story to: rahnl@windomnews.com, or call 507-831-3455. By sharing, you could prevent someone from being scammed.
State A.G. offers info on data breach steps
