Data Breach Email from Louisiana Office of Motor Vehicles

[BayouCountry]

Well, I was hoping it was just another scam email, but holy shit!! My personal information has been leaked by the Louisiana OMV. The OMV uses a third party data transfer service called “MOVEit.”

I froze my credit through the top three credit agencies.

I enrolled in LifeLock. I may switch to Aura because they handle all three major credit agencies under the lowest level plan, but not sure if that matters because my credit is frozen.

Why they didn’t have sensitive information encrypted in the database is beyond me. I’ve written applications for a hospital and any information at risk was encrypted through the software. If information needed to be exchanged with an outside agency, the key was transferred separately.

I am screwed.

[Aerovette]

Is it your information specifically or is it a form letter sent out to everyone?

I've gotten a couple of similar letters. I took no action and nothing has happened. It's been a couple years.

[Vegas]

Originally Posted by BayouCountry

Well, I was hoping it was just another scam email, but holy shit!! My personal information has been leaked by the Louisiana OMV. The OMV uses a third party data transfer service called “MOVEit.”

I froze my credit through the top three credit agencies.

I enrolled in LifeLock. I may switch to Aura because they handle all three major credit agencies under the lowest level plan, but not sure if that matters because my credit is frozen.

Why they didn’t have sensitive information encrypted in the database is beyond me. I’ve written applications for a hospital and any information at risk was encrypted through the software. If information needed to be exchanged with an outside agency, the key was transferred separately.

I am screwed.

Originally Posted by aerovette

Is it your information specifically or is it a form letter sent out to everyone?

I've gotten a couple of similar letters. I took no action and nothing has happened. It's been a couple years.

I got the 2 emails that were of the form letter notice type, understood it that if your specific data was leaked they would contact you/us personally

[BayouCountry]

Originally Posted by Vegas

I got the 2 emails that were of the form letter notice type, understood it that if your specific data was leaked they would contact you/us personally

Yep.

OMV is emailing notices to individuals whose information was involved in the incident and for whom OMV located an email address.

[Vegas]

Originally Posted by BayouCountry

Yep.

Guess I dropped the ball , well snap

[Frankie the Fink]

Most gov't agencies and financial houses have to offer you some protections when this happens in most jurisdictions, like free credit monitoring for a year and the like. But I'm not trusting the outfit that screwed the pooch to then try to "protect" me subsequent to their screw up. You are doing all the right things as I see it. You know all this if you've written corporate software...

Many hacks are "social engineering", a person (or persons) login id is compromised so they can collect data after its decrypted from the database for an admin or other bureaucratic user with legitimate access.

I had a corporate exec who was interviewing my company for a security gig ask me to hack into his system on the spot. I guess he thought I'd sit down and run a password cracker program.

I spotted the Help Desk number on a sticker on his computer and called them and stated the boss was late for a meeting and couldn't get his presentation off his computer as his password wasn't working and he was flipping out and ordered me (his assistant) to call them. It took some shouting and being an asshole but the help desk reset the password and gave me the temporary one over the phone.

We got the gig.

[Vegas]

Originally Posted by Frankie the Fink

Most gov't agencies and financial houses have to offer you some protections when this happens in most jurisdictions, like free credit monitoring for a year and the like. But I'm not trusting

Yeah they gave us a free year of norton livelock, I took it and froze credit with the 3

[BayouCountry]

Originally Posted by Vegas

Yeah they gave us a free year of norton livelock, I took it and froze credit with the 3

That’s about all we can do.

The credit companies allow four credit reports per year for free without harming the credit score. I ran it just to see if there was any activity I didn’t recognize.

I didn’t see the data breach on the local news so I was caught by surprise.

[Aerovette]

Originally Posted by BayouCountry

That’s about all we can do.

The credit companies allow four credit reports per year for free without harming the credit score. I ran it just to see if there was any activity I didn’t recognize.

I didn’t see the data breach on the local news so I was caught by surprise.

I use Credit Karma and can see any activity fairly instantly.

[Wathen1955]

Yeah I wouldn't waste money on LifeLock. I also use Credit Carma. The problem I see with LifeLock is you need to get the best plan which is $35/month.

https://www.usnews.com/360-reviews/p...ction/lifelock

[Torqaholic]

They must be super mad about not making any money on the situation like they do selling your name and address to junk mail senders without your permission.

[Onebadcad]

The greatest degree to protect your credit is to advise all three reporting agencies (EFX, XPN and TUC) that no one can pull your credit unless you provide a verbal approval.
Basically freeze your credit, works very well if you only use credit infrequently for large purchases.

Lifelock made gazillions off suckers, who did not know this could be done for free on their own.

[DJ_Critterus]

Originally Posted by BayouCountry

That’s about all we can do.

The credit companies allow four credit reports per year for free without harming the credit score. I ran it just to see if there was any activity I didn’t recognize.

I didn’t see the data breach on the local news so I was caught by surprise.

I always wondered why running a hard credit check would hurt your score? when I got my mortgage for my house, my lender along with OneBadCad stressed how important it was that my credit only be run one time.

[The_Dude]

Oregon DMV did the same thing a few weeks ago

[Frankie the Fink]

I literally 3 hours ago got a "breach notification" from some health company that held some of my records - same, same.... Freeze your credit, here is your free monitoring service, blah, blah... Apparently a compromised user-id and, as I said above, database encryption wouldn't have helped.

[dvarapala]

Originally Posted by BayouCountry

Well, I was hoping it was just another scam email, but holy shit!! My personal information has been leaked by the Louisiana OMV. The OMV uses a third party data transfer service called “MOVEit.”

MOVEit or LOSEit?

I froze my credit through the top three credit agencies.

I enrolled in LifeLock.

The credit freeze is a good idea, but LifeLock is a waste of time and money. Their CEO has had his identity stolen multiple times.