by Brian Thompson | Sep 14, 2022 | Identity Theft
The Realities of Identity theft include Emotional Loss, Psychological Pain, Helplessness, Anger, Isolation, and Betrayal.
The report uncovered intense “pervasiveness of identity fraud against U.S. consumers” and found the following:
- 47 percent of U.S. consumers surveyed experienced identity theft
- 37 percent experienced application fraud (i.e. the unauthorized use of one’s identity to apply for an account)
- 38 percent of consumers experienced account takeover (i.e. unauthorized access to a consumer’s existing account).
The Aite Group report found an estimated 42 percent increase in identity-related losses from 2019 to 2020. This demonstrates how identity theft is “rapidly growing in severity and will continue to flourish.”
The report also found serious consumer dissatisfaction with the assistance provided to victims following an identity theft attack. Among those dissatisfied said they were unlikely to do business with the at-fault financial institution in the future.
Beyond the known financial events of identity fraud crimes, ITRC explores the emotional and psychological impact of identity theft. Of which includes “an all-time high number of victims who say that they have contemplated suicide.”
Most consumers (and businesses) only view the financial impact of identity theft. Very few understand and have empathy for the emotional impact of identity theft. Not knowing that the victim is dealing with emotional loss, psychological pain, helplessness, anger, isolation, and betrayal.
Whether the perpetrator of an identity theft victim is a stranger, family member, or friend, identity theft triggers deep emotions. Emotions related to financial security, physical safety, the safety of family members, the ability to trust again, and the feeling of being violated. All of which can lead to extreme stress, sleepless nights, and bouts of depression.
Highlighting how many respondents who were identity theft victims had “definable emotional impacts, physical consequences and lost opportunities”. And reported that “10 percent of victims said they considered suicide.”
“The 2021 Consumer Aftermath Report shows that the effects of identity theft, particularly during COVID-19, are far-reaching and accelerating,” said Eva Velasquez, president, and CEO of the Identity Theft Resource Center.
Velazquez noted “in the report, you see the range of emotions – anger, frustration, fear, hopelessness – in their own words. It is crucial we share these findings so others can better understand the ramifications of identity crimes. Additionally, we can help force change to better support these victims.”
And while the ITRC survey responses are somewhat of a surprise to me – I was really surprised by the comment from Dr. Brandn Green, a Ph.D. Research Scientist at Bethesda, Maryland-based Development Services Group.
Dr. Green, a Sociologist investigating the social and environmental determinants of behavioral health, stated “the risk of having one’s identity stolen and used to perpetrate fraud may be the least studied, and most common criminal experience that individuals can encounter.”
As we began the realities of Identity theft include Emotional Loss, Psychological Pain, Helplessness, Anger, Isolation, and Betrayal. Now, you have more understanding and can help point them in a constructive direction.
Businesses Struggle with Rising Cases of Identity Theft
by Brian Thompson | Sep 6, 2022 | General, Identity Theft
ISP’s are spying on your family. But what’s an ISP and why should I care? An ISP, or Internet Service Provider, is a company that lets you access the internet from home, usually via a monthly subscription. It’s like a cable company, but instead of connecting you with TV channels, an ISP connects you to the internet. An ISP may sell one or more types of internet service, also called connection types.
Your Internet Service Provider (ISP) is the first connection point between the Internet and your computer. And you should know that ISPs represent one of the many potential threats to online security. After all, you connect to the outside world through their network. Your IP address is the one they assign to you for the duration of your session.
Is my ISP really spying on me?
In a word, yes. Your ISP is likely looking at the websites you visit online. They track you so they can sell your browsing history to other companies. Ever notice how creepy ads follow you around the Internet? This is because you are being tracked.
ISPs can see almost everything you’re doing online. They know the websites you visit, your streaming services, and more. And if you’re not using an encrypted connection, they may even be able to see the usernames and passwords you are using.
What is my ISP doing with my information?
Here in the U.S. ISPs have had the right to sell your private browsing history since 2017, as long as they anonymized your personal data. Major ISPs like AT&T, Comcast, and Verizon said their customers would be able to opt out of data collection, but they make it really hard to do that. Resource: How to Opt Out of your ISP’s Data Collection
Also, ISPs learn a lot by analyzing metadata, which provides them with general information about the kind of user you are. For instance, they could get information on size, timing, and destination of your data packets, which could tell them whether you’re browsing the web, using Skype, downloading files with BitTorrent or streaming movies from Netflix.
This means that ISPs may have more information about you than Google or Facebook, which we all know stores tremendous amounts of data about us.
A good rule of thumb: if you are not taking steps to protect your privacy online, then you should assume that everything you do online, including your emails, are being tracked.
How can I protect myself?
ISPs obviously know a lot about you, but the good news is that you can do a few things to protect your privacy online:
- Only visit secured websites: When you visit a secure website (they start with https://), ISPs can’t see what you’re doing there. The entire communication between you and the secure website you are visiting is encrypted, leaving your ISPs with ciphers it can’t read. The good news is that the most popular services are using HTTPS connections these days.
- Use a VPN like Private WiFi – Using a VPN like Private WiFi on all of your devices is the best way to mask what you do online, including from your ISP. Private WiFi encrypts the connection and routes your connection through the VPN’s server. This encryption prevents your ISP from seeing what you’re doing online.
So what are you waiting for? ISP’s – Spying on your family but defend-id can help secure your connection with Private WiFi. Contact us today to learn more!
Related Articles:
Home WiFi isn’t Safe from Hackers
I use a VPN whenever I work remotely
by Brian Thompson | Aug 25, 2022 | General, Identity Theft
Unfortunately, scammers often see students as easy targets for identity theft. Assuming, as young adults, they are less knowledgeable about identity theft and fraud. Often, students are more likely to fall victim to identity fraud and a lot of that has to do with the environment they are in, the way they communicate, and the information they have to share with the school. With these 7 student identity theft protection tips, students will be better prepared as they embark on their college life.
7 Student Identity Theft Protection Tips
- Don’t overshare.
Social media can make it easy for a scammer to learn personal details about you. Be careful what information you share on these sites because you never know who might see your posts. Your birthday, address, previous schools, and even your pets’ names could be used to gain access to your passwords and accounts if you’ve used them as answers to security or password retrieval questions.
- Speaking of oversharing, be particularly protective of your Social Security number. There are very few instances when it is necessary to provide it (possibly when you’re applying for financial aid or for a job). Make certain that the party requesting your SSN is reputable. Ask them why it’s needed and how they will keep your number secure. Never carry your Social Security card with you; keep it, along with any other documents containing your personal information, in a safe or other secure location.
- This also means keeping your Federal Student Aid (FSA) ID private. For questions about financial aid, contact the Federal Student Aid Information Center at studentaid@ed.gov or 1-800-4-FED-AID — don’t give out personal information over the phone unless you initiated the contact.
- Keep your devices secure.
Would the thief be able to access any private information? Use your security settings to their fullest and be careful what you store on your hard drive. Saved logins and easily accessible personal data make it easy for whoever stole your device to take over your identity.
- Build strong passwords and change them frequently.
It may be tempting to use the same passwords across your accounts so they are easy to remember, but don’t! Make passwords stronger by taking out vowels and adding in special characters. Most sites have their own requirements for what makes a password strong; typically, they should be unique, around 10 characters long, and not easy to guess.
-
Know what to watch for
Think before you click, phishing scams come in all shapes and sizes. For example, fake scholarships and loan listings can be used to target college students. Before sharing any personal information on an application, be sure that the institution is reputable. Look closely for anything suspicious. If a scholarship application asks you to pay an application fee or provide your bank account information, it’s probably NOT legitimate.
- Secure your connection with a VPN, (Virtual Private Network).
Unsecured computer networks make it easy for others to hack your personal information. Since secure network connections are not always available in libraries, student centers, or other public places, use a VPN to encrypt your online activity. Related Article: Public WiFi is Putting You at Risk
- Monitor and track your accounts and transactions.
Review your financial accounts frequently. Monitoring your bank statements, credit card bills, and credit score can help you notice suspicious activity and resolve it quickly. Enable two-factor authentication, which makes it more difficult for scammers to get access. Set up transaction alerts to be notified of suspicious account activity. And always log out of online banking and other secure sites before exiting. If you ever notice questionable account activity, whether login attempts from unknown devices or purchases you didn’t make, report them to the related institution immediately. That institution will provide you with the next steps, such as freezing the account or sending you a new card, to help protect your identity.
- Shred financial documents.
Financial documents often include personal information that you don’t want out in the open. Shred or black out the information printed on credit card offers, as well as on any bank or credit card statements you may receive in the mail, before disposing of them
So stay diligent, think before you click, and use these 7 Student Identity Theft Protection Tips. Identity theft can follow a student well into their professional career and family life. Do what you can now to prevent issues in the future.
Students Targeted for Identity Theft
Online Students are Targeted
by Brian Thompson | Aug 18, 2022 | General, Identity Theft
Schools across the nation are kicking off the new school year, and students are targeted for Identity Theft and Fraud schemes! Schemes that we never worried about in the early 2000s. Student life was simple, desktops were for papers, no smartphones, no social media, and socializing was actually in person!
That is not today’s reality
Now more than ever, devices, Social Media, and advanced schemes have increased the risk for students. Risks that now are more prevalent due to the majority of students having constant connectivity.
A significant increase in phony LinkedIn, Facebook, and other social media friend requests placing many students at risk coupled the daily inundation of information/misinformation has given cybercriminals an endless resource to implement their attacks.
It’s not just college kids though…
K-12 districts across the U.S. have become targets as well.
The worst-hit states include:
- New York with 89
- Texas with 79
- Illinois and Ohio each with 60
- Florida with 58
Overall, Colleges account for 74% of education data breaches.
Please see this dated but still relevant, July 14, 2020 article titled FBI warning-cybercrimes are up and school districts could be the target, for more information.
What students and parents can do to mitigate risk?
Students and Parents can mitigate exposure to cyber scams and identity theft in the following ways.
- The COVID-19 pandemic has new email phishing attacks that try to trick parents working and students studying remotely into giving away credentials for access to their employers’ and college/university networks. You need to stay vigilant and be careful with every email.
- A new voice phishing scam uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from again – both parents and students.
- Limit what you share online, use, and regularly change strong passwords on devices.
- Know your rights. “Student rights” under the Federal Educational Rights and Privacy Act (FERPA) protect the privacy of student records.
Online students are being targeted by Identity Theft criminals now more than ever. As these criminals continue to use student information to obtain employment, rent an apartment, open a utility, cell phone, or bank account, or access government benefits be ever aware of new and emerging scams.
by Brian Thompson | Aug 10, 2022 | Identity Theft
Some critics of social media say our addiction to apps and social media opens us up to privacy risk.
My question to app and social media users is when was the last time you read the terms and conditions? Further, when did you last adjust the privacy settings of your app or social media accounts?
While apps and social media offers convenience, entertainment, and networking opportunities – cyber thieves and ID theft criminals are leveraging social networks and apps to do their dirty work.
According to the second quarter 2022 Brand Phishing Report from Check Point Research, which “highlights the brands that were most frequently imitated by cybercriminals in their attempts to steal individuals’ personally identifiable information (PII) or payment credentials over the quarter,”
LinkedIn remains the most impersonated brand by phishing campaigns.
Brands to be aware of…
As most of you know, LinkedIn is a social media site and the world’s leading professional networking site. Hackers have imitated brands in business sectors such as social media (LinkedIn), technology (Microsoft), shipping/courier services (DHL) and online shopping (Amazon) and highlights the ongoing risks facing users of trusted business platforms.
I have listed below from the Check Point Research Brand Phishing Report the top ranked brands by their overall appearance in brand phishing attempts:
- LinkedIn (45%)
- Microsoft (13%)
- DHL (12%)
- Amazon (9%)
- Apple (3%)
- Adidas (2%)
- Google (1%)
- Netflix (1%)
- Adobe (1%)
- HSBC (1%)
Phishing scams of leading brands are effective because both we are more likely to click on a well-known name/brand.
But sometimes it’s more than just the hacker you have to worry about. Consumers and business executives need to know that apps and social media can track your search engine history, purchasing habits, geographical location, and even investigate your files and contact list – all without your knowledge and sometimes without your permission.
For example, when you install an app, most apps will require you to “accept” their terms and conditions – but did you read and really understand the type of information that is being collected and the kind of privacy threats you now are exposed to?
How bad can these “privacy threats” be? Just imagine an app vendor or third-party marketer collecting and selling your smartphone’s unique device ID, phone’s location, phone number, your age, gender, likes, dislikes, search-engine habits, e-mails, usernames and more to data brokers. And then imagine how these data brokers collect, analyze, and package your most sensitive personal information in a unique profile and sell it over and over again – without your knowledge.
Five tips to help you minimize your privacy risks:
- Limit and/or eliminate sharing your personal information online.
- Increase your privacy awareness by reviewing and adjusting your privacy settings.
- Be aware that some apps reset your privacy settings during major upgrades.
- Learn more on how your personal information is used and for what purposes.
- Consider using “privacy assistant or automation software” to help keep your privacy preferences current.
The fact is that cyber thieves and ID theft criminals love the trail we leave on social media. And Yes, social media opens us up to privacy risk but follow these tips and it will help.
Specific to receiving links of well-known brands on social media, my recommendation on receiving notifications from LinkedIn, Facebook or any other social media is to ignore the links or attachments. If a social media notification is legitimate, you will receive it again and then you can go to the social media network login page to retrieve it directly.
Related article:
by Brian Thompson | Aug 3, 2022 | General, Identity Theft
Thanks to the Internet, jobs that we used to have to do from the confines of an office can now be done at home. Even before COVID led many of us to work from home, millions of us already worked remotely. And that trend doesn’t seem like it will slow down any time soon. BUT home wifi isn’t safe from hackers.
There are good reasons for that, since remote work has many benefits for workers, as well as fewer overhead costs for employers. After a large chunk of the working population got a taste of working from home, many decided that they liked it.
However, working remotely has its own problems and challenges, especially in terms of network security. Your home network is probably not protected by the same rigorous cybersecurity protocols that corporate networks have access to. So, either the company or the employee needs to take steps to protect company data.
Can My Home Network Be Hacked?
Yes, your home network can absolutely be hacked. Our home wifi isn’t safe from hackers or as secure as our office environments. Also, if we are using our own laptops instead of work ones, we may not be using robust security to protect sensitive company information.
One common way hackers can get access to your home network is to guess the password. Routers often come with a default password that the manufacturer uses for all devices, and many times users don’t change this. A hacker only has to look up the default password associated with a particular router and can use it to gain access to all devices on the network.
In addition, hackers can also exploit security flaws in the router’s firmware. Since firmware is updated infrequently, hackers have all the time they need to discover and exploit security flaws before they’re fixed. According to a study by the American Consumer Institute (ACI), 83% of home WiFi routers are vulnerable to this kind of attack.
How Can I Protect My Home WiFi Network?
CNET recently published a great article which detailed ten things you can do to help protect your home network. These are a great starting point to learning exactly what needs to be done to keep company and personal data secure from unwanted eyes.
Place your router in a central location
One of the most important things is to place the router in the center of the home. Not only does this make the best quality connection, it also makes it harder for anyone outside your home to get a strong signal, and limits how far the signal can travel outside of your home.
Use a strong WiFi password and change it every six months
The best thing you can do to keep your WiFi network safe is to use a unique password that does not include any easily guessed passwords or phrases. This means no names, birthdays, phone numbers or other common information. And make sure to change this password at least once every six months.
Change the default router login credentials
You also want to make sure to keep anyone from accessing your router settings by changing the admin name and password for your router. These login credentials are separate from your WiFi password. You can access these by typing your router’s IP address in the URL bar of your browser.
Turn on your firewall and WiFi encryption
Your router has a firewall to prevent hacking, as well as encryption to keep anyone from stealing your data that’s being sent from your router to your connected devices. Check to make sure that both of these are enabled, and if they’re off for any reason, turn them back on.
Create a guest network
You probably trust the people you invite over to your house. But you should still consider creating a guest network for your visitors. Guests devices or anything they download on your network could be infected with malware or viruses targeting your network. This guest network is also great for all of your IoT devices. Devices such as your smart speakers or other appliances hooked up to your network. These devices are usually more easily hackable than a computer or phone.
Keep your router and devices up to date
While software updates may be annoying, it’s important to keep them up to date. Updates often include security updates and patches for exposed vulnerabilities. Making sure you install all the latest updates to your router and devices ensures that you reduce your exposure to these vulnerabilities and have the best protection you can get from hackers.
Disable remote router access
Your router usually has the ability for someone to remotely access the settings. There’s usually no need to do this, unless you plan on being away from home for some time. You can disable these in your router’s admin settings.
Verify connected devices
From time to time, look at the devices attached to your network to make sure you recognize them. If anything looks suspicious, disconnect it and change your network password.
Upgrade to a WPA3 router
All new routers have WPA3, the latest security protocol. So if you have a new router, you don’t have to worry about this. But if you have a router that was made before 2018, you might have a WPA2 device. If you do, be sure to upgrade your router.
Use a VPN
Probably the best way to protect your home network and your company’s data is to invest in a strong, reliable VPN.
Our RemoteWorkForceVPN not only protects remote employees when accessing information from the Internet, but it also provides secure access to company resources and databases. RemoteWorkForceVPN can also securely connect your company’s branches worldwide.
If their company does not provide a business VPN, remote employees can use Private WiFi – our consumer offering – to protect their home wifi from hackers.
As we enter the new world of working primarily from home, do everything you can to protect your home network. Follow these simple tips, because as you now know, home wifi isn’t safe from hackers.
Related articles:
I use a VPN whenever I work remotely
How WiFi Hacks Occur