PG&E’s smart meter security concern
By karen | June 8, 2010
A top cybersecurity firm recently tested 5 different brands of smart meters for vulnerabilities, and found that they all could be EASILY hacked into, allowing someone to remotely shut down your power, inflate your bills, tell if you’re out-of-town (making you a target for burglary), commit identity theft, or even bring down the whole electricity grid.
Once a smart meter is attached to a home, it can gather a lot more data than just how much electricity your family uses. It can tell how many people live in your house, when you get up, when you go to sleep and when you aren’t home! It can tell how many showers you take and the loads of laundry you do. How often you use the microwave. How much television you watch and what kind of TV you watch it on.
It’s technology that can pierce the blinds of your home which could lead to an invasion of consumer privacy. Law enforcement, government agencies and corporations, such as Microsoft and Google, already are have their eyes on all that data.
Consumers should be asking: How are they protecting our information? Who should have access, and what happens if it falls into the wrong hands?
Across the country 52 million smart meters will be installed by 2015, according to a Federal Energy Regulatory Commission estimate.
For more on this issue visit SmartMeters.com
Topics: Helpful Resources, blog home, karen lodrick's blog | No Comments »
Cyberwarfare, part 2
By karen | May 5, 2010
Topics: blog home, karen lodrick's blog | No Comments »
Tips for organizing your identity theft case
By karen | April 23, 2010
Accurate and complete records will help you resolve your identity theft case more quickly.
- Have a plan when you contact a company. Don’t assume that the person you talk to will give you all the information or help you need.
- Prepare a list of questions to ask the representative, as well as information about your identity theft. Don’t end the call until you’re sure you understand everything you’ve been told. If you need more help ask to speak to a supervisor.
- Write down the name of everyone you talk to, what he or she tells you, and the date the conversation occurred. Use the FTC’s Chart Your Course of Action worksheet for help.
- Follow up in writing with all contacts you’ve made on the phone or in person. Use certified mail, return receipt requested, so you have proof what the company received and when.
- Keep copies of all correspondence or forms you send
- Keep original supporting documents, like police reports and letters, send copies only.
- Set up a filing system for easy access to your paperwork
- Keep old files even if you believe your case is closed because problems can crop up again.
For more help visit FTC’s tools page
Related Topics: How to prove you have been a victim of identity theft
Topics: Helpful Resources, blog home, karen lodrick's blog | No Comments »
Play a game while learning about identity theft
By karen | April 23, 2010
Topics: blog home, karen lodrick's blog | No Comments »
How to prove you have been a victim of identity theft
By karen | April 23, 2010
Identity theft is stealing money and today you need to think of money as data either on paper or in cyberspace. Keep all documents and collect the paper trails in the real world and in the cyber world.
Get and keep all applications or other transaction records related to the theft of your identity. It will help prove you are a victim. For example, you may be able to show that a signature on an application is not yours.
Write letters–by law, companies have to give you a copy of all applications and other business transaction records related to your theft if you submit a letter in writing. Be sure to get the proper mailing address from them. There could be a charge after 30 days.
Give copies of all the documents related to your case to law enforcement, it may contain valuable information they can use. Also, have those businesses send copies to the law enforcement handling your case.
Those business can ask you for:
• Proof of your identity
• A police report and a completed affidavit from them or you can use the FTC’s Identity Theft Affidavit.
For more information visit ftc.gov/idtheft
Topics: Helpful Resources, blog home, karen lodrick's blog | No Comments »
Medical identity theft startling stats
By karen | April 7, 2010
Jennifer Leuer from Protect my ID.com worked with Ponemon Institute and found some starling statistics around medical identity theft. I was shocked to discover the average cost to victims is $20,000.00 while the average bank identity theft cost is $5,000. The reason–it goes unnoticed for a long time–on average it takes a year before the victim discovers a problem–Plus, medical bills are expensive.
40% discovered after reviewing their credit report files.
Most discover a problem after getting a call from a collection agency.
1.4 million people become victims annually
46% of victims do not notify the police
48% of victims lose their medical insurance coverage
55% make out-of-pocket payments, so they won’t lose their coverage
Medical identity theft is complicated because there are many parties involved–the insurance company, the numerous providers (e.g. doctors, labs, pharmacies)–making for countless hours on the phone. It is much more time consuming than bank fraud and it leaves huge emotional scars. It has the same after effects as more violent crimes. It is very violating and emotional because you never know when it is going to stop. It can lead to paranoia. Victims become very unsettled and feel ashamed. It changes your life forever.
The criminals:
It is easy for criminals to get treatment once they get a medical insurance card because it is considered a valid ID when seeking medical treatment. Medical offices will not ask for other identification due to privacy issues.
They go with your name and SSN (Social Security Number) and promise to pay the doctor and the collections company eventually come looking for you. One reason why it is good to look at your credit reports regularly.
Crooks apply for a line of credit in your name and use it to get medical surgeries. First, the lender goes after the doctor, and then the doctor comes after the victim.
Jennifer Leuer’s tips for protecting yourself against medical ID theft:
- Don’t give out your SSN to doctors offices, your medical insurance card is enough
- If you lose your card call for a new medical plan number and card
- Look diligently over your medical insurance statements when sent to you and make sure you understand all the treatments you are being billed for
- View your free credit reports regularly
- Keep that info secure from family and friends. Sad but true–23% knew the thief
- Consider getting identity theft insurance like Protect my ID.com
Topics: Helpful Resources, blog home, karen lodrick's blog | No Comments »
Identity theft and cybercrime statistics in picture graphs
By karen | March 29, 2010
Fraud continues to rise in 2009, with Javelin’s finding show there are more victims than in any period since the survey began in 2003.
The Javelin 2010 Identity Fraud Survey Report provides a detailed, comprehensive analysis in order to help consumers and businesses better understand the effectiveness of methods used for its prevention, detection and resolution.
A nationally representative sample of 5,000 U.S. adults, including 703 fraud victims, was surveyed via a 50 question phone interview to gain insight into this crime and the effects on its victims.
The total annual fraud amount in 2009 was $54 billion, a 12.5% increase over 2008, when it was $48 billion. In 2009, 11.1 million U.S. adults became victims of identity fraud, a 12% increase over 2008, and a 37% rise since 2007.
New account fraud is the main driver of the overall increase in total dollar fraud.
There are significant changes from the 2008 findings, with several states reporting a higher incidence of fraud in 2009. There appears to be no geographic pattern in increases and decreases. California was alone in showing a significantly greater than average incidence of fraud.
Existing non-card fraud and new accounts fraud can persist for up to one year or more without detection, while existing card fraud is generally over relatively quickly.
Bank accounts once again were the most misused account type in existing non-card fraud in 2009. However, misuse of Internet-based accounts and email pay accounts increased. Victims were four times as likely to identify abuse to their Internet accounts (e.g. eBay, Amazon) than they did in 2008 (21% vs. 50%). The same was true for alternative email payment accounts such as PayPal (14% vs. 3% the previous year).
One out of every 10 identity theft victims still suffered from account takeover (11%) in 2009.
The loss of SSNs are particularly devastating to ID fraud victims because they can be used to open fraudulent new accounts, which are very difficult to detect without access to a credit report or a credit monitoring service.
Normally, the sooner a breach is stopped, the lower the costs.
Younger adults suffer greater exposure and fraud victimization through social networking.
How they obtain information to preform fraud.
Topics: blog home, karen lodrick's blog | 1 Comment »
Collaborating cyberspace security
By karen | March 21, 2010
On March 16, 2010, I had the opportunity to spend the day with the Fourth Annual IT Security Entrepreneurs’ Forum (ITSEF IV) — part of the Security Innovation Network (SINET) at Stanford University. The organization was created by Robert Rodriguez, a former secret service agent wanted to increase the collaboration between the United States government and the private business community to keep the Internet growing and thriving within a secure cyber environment. His Network is designed to “bridge the gap” of these two sectors through partnerships, social networks, and venues that enhance knowledge and awareness across company and agency boundaries.
Robert is on the right track with his innovative thinking. The internet is like the “wild wild west” and the United States has a great opportunity to maintain an innovative advantage through collaborating, instead of thinking of it as a competition. We need a new approach to maintain our cyber world.
“The Security Innovation Network is focused on advancing IT security innovation through collaborative models,” says Robert, who each year hosts the IT Security Entrepreneur’s Forum.
Cyberspace has a unique opportunity to show a new practice of business–collaboration. It is nice to see companies wanting to do this. Call me idealistic, but we should no longer be about competition; leave that for our entertainment (e.g. movies, sports). People will prosper under collaboration and cooperation. This is a necessity for our country to embrace our differences, build new trust, and come together for the reason of excellence.
Topics: Helpful Resources, blog home, karen lodrick's blog | No Comments »
Cybercriminals don’t need technical skills just a criminal mind
By karen | March 15, 2010
Hurray for the Spanish security authorities! They captured the Mariposa botnet operators. The Mariposa botnet networked through nearly 13 million computers across 190 countries. It compromised systems from across several Fortune 1000 companies and 40 financial institutions. At the time of his arrest, one of the botnet operators possessed sensitive information about approximately 800,000 victims.
The three men, authorities said, were no computer geniuses. Now it seems almost anyone can operate a botnet through simple commands on self-explanatory, Web-based programs. 66% of last year’s malware were data-stealing programs, most of which were produced with do-it-yourself hacking kits. So easy to learn, “your grandmother could build a botnet.”
Fraud software is also growing and becoming a competitive sport. Hackers compete against each other to make the most effective and easy-to-use tools. Within the software are powerful search engine so amateur hackers can browse through their victims’ machines and find detailed information, such as which banks they use.
The software allows criminals to use simple onscreen checkboxes to choose the vulnerabilities - the holes used to plant malicious programs in users’ computers - generating colorful graphics detailing victims’ attacked and the operating systems and browsers they use. The program even offers 24-hour technical support.
The FBI reported that Internet fraud victims lost about $560 million last year, more than double the amount reported in 2008.
Security experts say these cyber-criminals usually make their money from distributing spam, crashing Web sites with a flood of traffic, or selling stolen credentials.
Read full story by, Alejandro MartĂnez-Cabrera, Chronicle Staff Writer
Topics: blog home, karen lodrick's blog | No Comments »
2010 Census to begin proceed with caution
By karen | January 31, 2010
With the U.S. Census process beginning, the Better Business Bureau (BBB) has advice so people can avoid becoming a victim of fraud or identity theft. U.S. Census workers have begun verifying the addresses of every household across the country. Eventually, more than 140,000 U.S. Census workers will count every person in the U.S. and will gather information about every person living at each address.
How to tell the difference between a U.S. Census worker and a con artist:
If a U.S. Census worker knocks on your door, they will have a badge, a handheld device, a Census Bureau canvas bag, and a confidentiality notice. Ask to see their identification and their badge before answering their questions. However, you should never invite anyone you don’t know into your home.
REMEMBER, NO MATTER WHAT THEY ASK, YOU REALLY ONLY NEED TO TELL THEM HOW MANY PEOPLE LIVE AT YOUR ADDRESS.
DO NOT give your Social Security number, credit card, or banking information to anyone, even if they claim they need it for the U.S. Census. The Census Bureau will not ask for Social Security, bank account, or credit card numbers, nor will employees solicit donations. Any one asking for that information is NOT with the Census Bureau.
While the Census Bureau might ask for basic financial information, such as a salary range, YOU DON’T HAVE TO ANSWER ANYTHING AT ALL ABOUT YOUR FINANCIAL SITUATION.
AND REMEMBER, THE CENSUS BUREAU HAS DECIDED NOT TO WORK WITH ACORN ON GATHERING THIS INFORMATION.. No Acorn worker should approach you saying he/she is with the Census Bureau.
Eventually, Census workers may contact you by telephone, mail, or in person at home. However, the Census Bureau WILL NOT contact you by Email, so be on the lookout for Email scams impersonating the Census.
NEVER click on a link or open any attachments in an Email that are supposedly from the U.S. Census Bureau.
For more advice on avoiding identity theft and fraud, visit www.bbb.org; PLEASE SHARE THIS INFO WITH FAMILY AND FRIENDS.
Topics: Announcements, blog home, karen lodrick's blog | No Comments »
« Previous Entries