What You Should Know About Identity Theft

September 11, 2019 - At Home, Blog, Featured - Comments:

Information courtesy of CISA

With so many major data breaches in the last few years, chances are there’s no one whose personal information hasn’t already been compromised. Every time your information is stolen, you are at risk of identify theft. But, according to the Cybersecurity and Infrastructure Security Agency (CISA), your identity can be stolen even if you never use a computer.

As part of National Preparedness Month, the information below is provided by CISA. For additional information about cybersecurity, go to www.ready.gov/cybersecurity,

You don’t have to use a computer to become a victim of identity theft. Malicious people may be able to obtain personal information (such as credit card numbers, phone numbers, account numbers and addresses) by stealing your wallet, overhearing a phone conversation, rummaging through your trash (a practice known as dumpster diving) or picking up a receipt at a restaurant that has your account number on it. If a thief has enough information, he or she may be able to impersonate you to purchase items, open new accounts or apply for loans.

The internet has made it easier for thieves to obtain personal and financial data. Most companies and other institutions store information about their clients in databases; a thief who can access that database can obtain information about many people at once rather than focus on one person at a time. The internet has also made it easier for thieves to sell or trade the information, making it more difficult for law enforcement to identify and apprehend the criminals.

Identity theft is usually a crime of opportunity, so someone may be victimized simply because their information is available. Thieves may target customers of certain companies for a variety of reasons; for example, a company database is easily accessible, the demographics of the customers are appealing, or there is a market for specific information. If your information is stored in a database that is compromised, you may become a victim of identity theft.

Are there ways to avoid being a victim?

Unfortunately, there is no way to guarantee that you will not be a victim of online identity theft. However, the following tips will help you to minimize your risk.

Do business with reputable companies.

Before providing any personal or financial information, make sure that you are interacting with a reputable, established company. Some attackers may try to trick you by creating malicious websites that appear to be legitimate, so you should verify the legitimacy before supplying any information. (See Avoiding Social Engineering and Phishing Attacks and Understanding Web Site Certificates for more information.)

Take advantage of security features.

Passwords and other security features add layers of protection if used appropriately. (See Choosing and Protecting Passwords and Supplementing Passwords for more information.)

Check privacy policies.

Take precautions when providing information, and make sure to check published privacy policies to see how a company will use or distribute your information. (See Protecting Your Privacy and How Anonymous Are You? for more information.) Many companies allow customers to request that their information not be shared with other companies; you should be able to locate the details in your account literature or by contacting the company directly.

Be careful what information you publicize.

Attackers may be able to piece together information from a variety of sources. Avoid posting personal data in public forums. (See Guidelines for Publishing Information Online for more information.)

Use and maintain antivirus software and a firewall.

Protect yourself against viruses and Trojan horses that may steal or modify the data on your own computer and leave you vulnerable by using anti-virus software and a firewall. (See Understanding Anti-Virus Software and Understanding Firewalls for more information.) Make sure to keep your virus definitions up to date.

Be aware of your account activity.

Pay attention to your statements, and check your credit report yearly. You are entitled to a free copy of your credit report from each of the main credit reporting companies once every 12 months. (See AnnualCreditReport.com for more information.)

How do you know if your identity has been stolen? Companies have different policies for notifying customers when they discover that someone has accessed a customer database. However, you should be aware of changes in your normal account activity.

The following are examples of changes that could indicate that someone has accessed your information:

Unusual or unexplainable charges on your bills
Phone calls or bills for accounts, products or services that you do not have
Failure to receive regular bills or mail
New, strange accounts appearing on your credit report
Unexpected denial of your credit card

If You Become a Victim

Recovering from identity theft can be a long, stressful and potentially costly process. Many credit card companies have adopted policies that try to minimize the amount of money you are liable for, but the implications can extend beyond your existing accounts.

To minimize the extent of the damage, take action as soon as possible:

Start by visiting IdentityTheft.gov — this is a trusted, one-stop resource to help you report and recover from identity theft. Information provided here includes checklists, sample letters and links to other resources.

You may need to contact credit reporting agencies or companies where you have accounts, file police or other official reports, and consider other information that may have been compromised.

Other sites that offer information and guidance for recovering from identity theft are: