Don't Cry For Me

[Perknose]

Argentina.

Equifax had 'admin' as login and password in Argentina

This gave access to records that included thousands of customers' national identity numbers. I swear, you just can't make this stuff up.

Obligatory Madonna singing the song to clips from the movie.

 

[interchange]

Near as I can figure, this was a web app for employees only accessable from their intranet. Still colossally stupid, but not as bad as it sounds.

I once had to do a charge dispute from Equifax credit monitoring I didn't sign up for. When I talked to them, they explained that likely their customer got one of the numbers on their card wrong. When I asked why the CVV code, name, or address verification didn't stop them from charging me, they explained that they don't do any of that. They just trust the number their customer gives. A damn fraud protection service run by a major credit bureau didn't even try to protect themselves from defrauding people in the most basic way possible.