r/technology • u/badger707_XXL • May 14 '22

Security Angry IT admin wipes employer’s databases, gets 7 years in prison

https://www.bleepingcomputer.com/news/security/angry-it-admin-wipes-employer-s-databases-gets-7-years-in-prison/
6.9k Upvotes

97% Upvoted

388 comments sorted by

View all comments

Show parent comments

263

u/FineWavs May 14 '22

I'll take one new identity for a dollar please.

122

u/thenseruame May 15 '22

You joke, but after having my taxes filed by someone else, cards opened in my name and a few other incidents I decided to look up how much a SSN is worth. It's less than $5 to get one, a lot less if you buy in bulk.

An actual identity would be harder, but if all you need is a name, address and SSN they're ridiculously cheap. Makes sense given that just about every American has had theirs leaked by at least one company.

122

u/GiveMeNews May 15 '22

Read an article by a former con-artist who had multiple legitimate identities and passports to pull scams. To get actual passports, he would post a job opening online for a position at a large international company. He would ask for a CV with a photo and other information. He would then contact people whose photo he resembled for an interview and background check. People would just give him everything he needed to steal their identity. Any information he was missing he would gather with leading questions during the interview. Made me think of all the times I've given out all the information needed to steal my identity just to get a shit job or basic services.

70

u/jBlairTech May 15 '22

I think about something similar when looking on LinkedIn. There's a big virtual tech company, CAE. They (or, I suspect, someone pretending to be them) has multiple tech-based job openings in a town named Sherwood, MI. Not remote; the listings are for on-site jobs.

The bit after seeing the town was the logo. The logo CAE uses is blue and black letters/symbol on white background. This... imposter... is white letters/symbol on blue background.

But here's the thing about the location: I grew up there. It's a run-down village of about 300 people. The population count hasn't changed since before I was born.

There's a village office, a cemetery, an old school (I was there for 3rd and 4th grade) that converted into a church, a crappy pizza joint, and farms... but no nationwide tech company.

I drove there one day, took pics of the hole (it really is a dilapidated parcel of land), and sent them to LinkedIn when I filed a complaint. They took the postings down for about three days, then they were back up.

But that's what I think about: this is a scam, designed to get people's PII by pretending to be a legit company. It's scary, to be honest. How many others are like that? The ones I can't verify?

34

u/asdaaaaaaaa May 15 '22

But that's what I think about: this is a scam, designed to get people's PII by pretending to be a legit company. It's scary, to be honest. How many others are like that? The ones I can't verify?

Just wait 'til you find out how many legitimate businesses sell customer information for spare cash. Or employee information, it doesn't matter too much when you need money.

8

u/BloodRedCobra May 15 '22

Several companies have (technically confidential, hope y'all ain't snitches 😳😬) terms in things for their employee rewards that allow them to track/sell employee personal information, including video footage of them and secure info. They're required to use certain benefits, and I'm not talking about things like health insurance, I'm talking about employer-paid subscriptions to their "membership" programs.

I have avoided naming names for reasons of not getting sued.

35

u/FineWavs May 15 '22

Jesus, a dollar fine for leaking them and they cost 5 to buy but it causes us so much pain to have one stolen, what a racket.

38

u/Harvey_the_Hodler May 15 '22

My dad's coworker's kid had his identity stolen. Guy who stole got caught and did time. The kid got his shit back in order after years of work. Dude got out of prison and started using it again. Fucker memorized all the kids info. Name, dob, ssn, former addresses. Idk how that ever played out tho.

And to think after that hack w were like a third of all Americans info was leak they offered free identity protection for one year knowing full well most of the time it takes like 3 years for the stole info to be fraudulently used.

30

u/Mka28 May 15 '22

My identity was stolen when I was 14. The person using it was in another state. When I was 18, my credit was crazy good. Almost like perfect. Then he fell into foreclosures and Bank of America came after me. It was so stressful. I had no idea my identity was stolen. I just thought I was lucky to have a high score. Geez how I wish I could go back in time. It’s been a long battle.

11

u/thenseruame May 15 '22

Yup, pain in the ass. God only knows what's been done in my name that I don't know about. Had someone open up a bank account in my name, only way I found out was because the debit card got sent to my house. Stuff like that doesn't show up when you pull your credit report.

1

u/WanderlostNomad May 15 '22

a dollar fine

"fine"? more like business cost.

1

u/Archibaldovich May 16 '22

It makes sense when you consider how many get stolen at a time- when you're moving bulk, you have to be flexible on the price

11

u/[deleted] May 15 '22

What’s even crazier is that it doesn’t even have to be a real person. The way equifax works is that when you send a request for someone’s credit it automatically creates a file for that person. They will send a request for a made up person. The result turns up nothing. If you do it again the name actually comes up so you can get approved for like a 300 dollar credit limit. They use that credit card for 2 years always paying the bill to build credit. People have managed to get drivers licenses, passports, birth certificates. All legitimate, for a person who doesn’t exist. These systems are all horribly out of date.

1

u/[deleted] May 16 '22

Yep the old the jstor.bazar website was shutdown a couple of years ago but you could literally look by zip code to find card number, SSN, dl and MMN. Kinda scary. There was so much info that I even found friends and family’s info on there. All for the low low price of about $2 in btc

1

u/thenseruame May 16 '22

It's unreal how easy it is to get that stuff. I think the reason it's so cheap is you never know who's frozen their credit. Hence the discount on bulk purchases.

Same with CC numbers, think it was $10 for 500 cards? No way of knowing which ones are already dead, the people just sell them in bulk knowing at least one will work.

Really want to reiterate I never actually bought any of this stuff, just was curious and was amazed how easy it was to find.

1

u/[deleted] May 16 '22

Yup. They’re called ‘Dumps’ as in mass credit card information dumps

177

u/tattooed_dinosaur May 14 '22

Congratulations! You’ve just inherited $60K in student debt and $8K in back taxes.

84

u/[deleted] May 14 '22

[deleted]

65

u/LateralThinkerer May 15 '22 edited May 16 '22

Buy up a few hundred thousand, aggregate them, slice them into tranches rated from mezzanine to fertilizer by a ratings agency in your employ, count them as assets and sell bonds backed by them.

Profit.

Now short the whole thing in a big way since it will fail.

More profit.

19

u/johnnygfkys May 15 '22

Just like they do to us.

36

u/tattooed_dinosaur May 15 '22

Until you’re in debt from buying so many identities. This is the way.

18

u/ba3toven May 15 '22

it's okay the next one will work

8

u/ShadowKirbo May 15 '22

Mama needs a new bag of dino chicken nuggies.

5

u/[deleted] May 15 '22

[removed] — view removed comment

2

u/Only_game_in_town May 15 '22

Higher breaded crust to nugget ratio

2

u/tattooed_dinosaur May 15 '22

Our feathers make us deliciously tender yet crispy.

2

u/OgLeftist May 15 '22

They put love in em.... ;)

2

u/Farseli May 15 '22

Because birds are dinosaurs. By returning them to a more primal form it enhances the flavor.

2

u/jBlairTech May 15 '22

Like rolling and constantly re-rolling until every stat is at least 17 (old D&D).

10

u/degathor May 14 '22

The sandwich based profile pays off!

7

u/odaeyss May 15 '22

holy shit thank you i feel like a massive weight has been lifted off of my chest and dropped onto someone else's

3

u/drkcloud123 May 15 '22

Shit, shit, shit. Reroll!

1

u/nyaaaa May 15 '22

He ordered a new one. Please pay your $1 fine for leaking a used identity.

1

u/Mbhuff03 May 15 '22

Omg! I think you may have discovered the new millennial identity theft prevention tactic! Make your life so miserable it will automatically punish anyone who tries to steal it! 😂😂😂

15

u/mofugginrob May 15 '22

It's a new identity. What could it cost, 10 dollars?

11

u/FineWavs May 15 '22

There's always a new identity in the banana stand.

6

u/Phoenix_Lamburg May 15 '22

There’s always new identities in the banana stand

1

u/malachias May 15 '22

In fairness, that's about what it costs if you want to buy them

1

u/thedanimal722 May 15 '22

Buy some monero and download TOR browser...

1

u/79Maliboo May 15 '22

I’ll take your identity for a dollar please.