遭黑客入侵反被告上法庭 只因對1.43億消費者個人信息保護不力
[導讀：2017年9月19日，美國馬薩諸塞州檢察長Maura Healey以未能保護好消費者個人信息為由對知名徵信機構Equifax公司提起了訴訟。此前，Equifax公司曾遭黑客入侵，使得近1.43億消費者的重要個人信息在此次事件中面臨被暴露的危險，其中包括近300萬馬薩諸塞州居民的個人信息。對此，Healey認為Equifax違反了馬薩諸塞州消費者保護和數據隱私法。據悉，這是官方對該公司採取的首個執法行動，預計接下來還將有一系列針對Equifax公司的法律行動。賓夕法尼亞、紐約、伊利諾伊和康涅狄格等其他州的幾十位檢察長也已要求Equifax公司提供此次入侵事件和公司回應的相關信息。此外，美國聯邦貿易委員會和聯邦調查局也在調查此事。（本文源自路透社。導讀系本公眾號原創，轉載請註明文字出自本公眾號。）]
Massachusetts Attorney General Maura Healey filed a lawsuit on Tuesday against credit reporting firm Equifax Inc (EFX.N) following a breach that exposed the personal data of up to 143 million people, including 3 million in the state.
Senator Elizabeth Warren, a Massachusetts Democrat, called the breach a 「nightmare」 and said credit reporting companies should not profit from monitoring or freezing credit arising from the hack.
Equifax said the massive breach of sensitive data, including Social Insurance Numbers, might affect about 100,000 Canadians.
Equifax』s share price has fallen by about one-third since it disclosed the data breach, among the largest ever recorded, which included sensitive data like Social Security numbers, on Sept. 7.
Equifax shares closed up 0.5 percent at $94.87.
The lawsuit seeks civil penalties, disgorgement of profits, restitution, costs, and attorneys』 fees.
「Equifax needs to pay for its mistakes, make our residents whole, and fix the problem so it never happens again,」 Healey said in a statement.
「The Equifax hack is a nightmare,」 Sen. Warren said on the Senate floor. 「At best, it is a giant hassle. Time on hold with credit reporting agencies. Fees for this service or that service. Confusion about what』s been stolen and what to do about it.」
Warren said it was inappropriate for Equifax to collect credit card information with an eye to later charging people for credit monitoring. 「No one in this industry should profit from this hack,」 she said.
Equifax has waived fees for removing and placing security freezes through Nov. 21.
Equifax, in its statement issued before Warren』s remarks, said it was aware that consumers were unhappy about glitches on its website and their difficulty in reaching call centers.
「We are experiencing a high volume of requests for security freezes,」 spokesman Jefferies said, adding that Equifax was working diligently to improve customer service.
Hackers broke into Equifax』s database via a section of the company』s website where consumers dispute inaccurate information. On that portal, Equifax maintained consumer names, addresses, Social Security numbers and other sensitive information on at least 143 million consumers without encrypting it, the Massachusetts complaint says.
The data is deemed sensitive because consumers use it to prove creditworthiness when they want to buy homes or cars. But it can also be used by thieves to illegally apply for credit under consumers』 names.
The breach and the company』s response to it is being investigated by the Justice Department, the Federal Trade Commission and a group of about 40 state attorneys general. Additionally, Equifax Chief Executive Richard Smith is expected to testify on Oct. 3 before a House of Representatives panel.
Equifax said last week that it would likely need to contact fewer than 400,000 British consumers whose personal information might have been accessed in the breach.
--------------------
微信公眾號名稱：「個人信息與數據保護實務評論」
我們致力於提供中國個人信息/數據保護/隱私保護最新資訊，包括法規速遞、執法機關動態、行政執法、民事訴訟、中外執法交流、學術研究等。提供案例解析、理論介紹、律師實務操作指南，以及原創個人信息/數據保護/隱私保護評論和文章，部分內容為中英文雙語。歡迎您的關注。
