Jump to content
View in the app

A better way to browse. Learn more.

Surly Horns

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (â‹®) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Nearly 28 Million Texas Driver's Had Their Info Stolen (Data Breach)

Featured Replies

Of course, because it's 2020.  Free credit monitoring, etc. being offered by them https://vertafore.kroll.com/

https://www.fox26houston.com/news/nearly-28-million-licensed-texas-drivers-hit-by-data-breach

Quote

Driver's license numbers, names, birthdates, addresses, and vehicle registration information were stolen for nearly 28 million Texas drivers who received a license before February of 2019.

Quote

An insurance software company called Vertafore, which has legal access to that DMV information, said in a statement the data was inadvertently stored in an unsecured storage service that was hacked between March and August of this year.

Vertafore says the company has known about the breach since mid-August. 

Quote

The company says they reported it to the Texas Office of the Attorney General, the Texas Department of Motor Vehicles, and the Texas Department of Public Safety and wrote, "Vertafore’s notice was delayed at law enforcement’s request."

Vertafore says they hired a third-party firm to investigate but identified no misuse of the information so far.
But James Lee with the Identity Theft Resource Center says give it time.

"It's something they may wait to use.  So you're not out of the woods just because a year has passed, two years have passed, three years have passed," Lee explained.

Quote

The Texas DMV issued this statement regarding the breach:
"The breach of information was caused by Vertafore. The Texas Department of Motor Vehicles was not hacked and was not the cause of the breach. The Texas Department of Motor Vehicles takes protecting consumer information very seriously. The department classifies and protects data based on existing statutory regulations and industry principles, and retains and destroys all data in accordance with state and agency data retention and data sanitization policies.

"The department only allows outside use of information for reasons found in Transportation Code Chapter 730 and the Federal Drivers Privacy Protection Act. These laws permit, and at times require, the release of motor vehicle records to authorized parties."

Drivers can contact Vertafore to see if their information was hacked by calling 888-479-3560.  Vertafore says it is offering those impacted one year of free credit monitoring through Kroll, which will help resolve any damage to your credit report. 

The data was accessed

Quote

The company released a statement Friday blaming human error on three data files being stored on an unsecured external storage service, where they were accessed by unauthorized personnel.

 

What good does it do to have someone’s DL number?

To vote, duh!  

always such bs that the penalty faced by these companies is paying for mass credit monitoring.  Sorry we lost your data, let me buy you something worth a few bucks. cool?

I apologize in advance, Spanish-Speaking Guy who now has my old Texas cell phone number.

At this point, I think its safe to assume that everyone has had some amount of personal information compromised to one extent or another through one or more data breaches. In a world full of dumb fucks, relying on companies to avoid "human error" seems futile. I lose track of the number of these that could possibly affect me.

When I moved back to Austin and was getting bills set-up, I recall both the COA Utility and others asking for my social security #. I was like what the fuck do you need that for to serve me power and pick up my trash. I actually had to put down a deposit on a couple of accounts because I refused to give them my SS#. I realize my SS# has probably already been hacked, but no reason to give it out more than necessary. Its crazy the companies that feel entitled to your SS# or even the last 4 digits. fuck that noise

Another pet peeve is the use of security challenge questions when enrolling in online services. Everyone uses the same fucking questions, so if one service gets hacked and its tied to your email, now that shit can be used to gain access to other online services. Fucking figure out a different way to police access to online accounts on your website. 

Jokes on them - my license was already suspended

20 minutes ago, BehoId, The Underminer! said:
Population
 (2019)
 • Total 28,995,881

That's just your opinion

I had my identity stolen about 3 years ago.    Pain in the ass. 

Everyone should freeze their credit with the 3 agencies.  Easy to do, easy to unlock / allow access as needed.   

33 minutes ago, BehoId, The Underminer! said:
Population
 (2019)
 • Total 28,995,881

This explains why I say "what the fuck is this guy doing" so much while driving....8 year olds dude.

34 minutes ago, BehoId, The Underminer! said:
Population
 (2019)
 • Total 28,995,881

Exactly what i was going to post.  Only 1 million Texans don't have a license?

Fuck the dumb bastards, don't nobody want MY identity any damn way.

  • Author
43 minutes ago, Blotto said:

Another pet peeve is the use of security challenge questions when enrolling in online services. Everyone uses the same fucking questions, so if one service gets hacked and its tied to your email, now that shit can be used to gain access to other online services. Fucking figure out a different way to police access to online accounts on your website. 

Most security questions could be answered in 5 minutes by looking at somebody's Facebook profile/posts.

That's why my facebook account only consists of fake information, pictures of other people, random animals with made up names, friends I don't have, etc.

1 hour ago, atomheartbevo said:

Most security questions could be answered in 5 minutes by looking at somebody's Facebook profile/posts.

True, but I don't have a publicly accessible facebook page and very little data beyond my name, highschool and college on the profile . And shit like "mother's maiden name", "first pet's name", "street name where you grew up" etc.... would be a pretty detailed facebook profile.

Still, challenge authentication for websites needs to move beyond  asking for readily available information. These companies should realize that the vast majority of their customers litter that information all over the web. I'd like to see these companies assume their customers are fucking idiots and devise an authentication scheme that works around that inconvenient truth. But I guess they don't have to, as people will use whatever they throw at them without a second thought. 

1 hour ago, Lobo said:

To vote, duh!  

You got Bender's weed in your underwear too?

That's why my facebook account only consists of fake information, pictures of other people, random animals with made up names, friends I don't have, etc.

Why even have it then?
27 minutes ago, Wally Pryor said:

I had my identity stolen about 3 years ago.    Pain in the ass. 

Everyone should freeze their credit with the 3 agencies.  Easy to do, easy to unlock / allow access as needed.   

indeed. if you are in a position to do this i would. have a CC, a home, auto whatever and if nothing for a year then do this. 

I had my identity stolen about 3 years ago.    Pain in the ass. 
Everyone should freeze their credit with the 3 agencies.  Easy to do, easy to unlock / allow access as needed.   

Interesting idea. Can you expound?

I received a notification for this several weeks ago.

I reached out to TX DPS. Received useless generic email reply a couple days later. 

I bought a certified copy of my driving record. 

I need to renew my license anyway to be "REAL" compliant so I figured I should be proactive and change my DL #.

To change your DL # you must report it lost/stolen to local PD and get a report #. I called 311 and told them of the notification and got a call back about 24 hours later.

Was told straight up that someone even physically stealing your DL does not meet DPS protocol to change the #. I have to be the victim of ID theft and there's nothing preventive I can do on this front.

My credit is frozen so there's not much anyone can do but I found this pretty laughable. 

 

Edited by B00M

33 minutes ago, Wally Pryor said:

I had my identity stolen about 3 years ago.    Pain in the ass. 

Everyone should freeze their credit with the 3 agencies.  Easy to do, easy to unlock / allow access as needed.   

Yup. Don't forget to lock your kid's credit too.

  • Author
39 minutes ago, BehoId, The Underminer! said:
Population
 (2019)
 • Total 28,995,881

It goes back decades and includes dead people, people who moved out of Texas, etc. and I believe it includes ID's.

13 minutes ago, tbone_ said:


Why even have it then?

to perv on teenage girl accounts

  • Author
16 minutes ago, Blotto said:

These companies should realize that the vast majority of their customers litter that information all over the web.

Which is why there are actual regulations about data privacy in Europe, but not here in the US (it's why you get those pop-ups on some websites about their data policies, GDPR, etc.).  People over there are more concerned about sharing their private info than people here.

  • Author
40 minutes ago, Wally Pryor said:

I had my identity stolen about 3 years ago.    Pain in the ass. 

Yep.  Real pain in the ass, because the involved government agencies and companies usually give no shits.

I only found out about it by accident.  Even then, the companies/agencies involved would not give me the full information on the data that was being misused, because somehow the motherfucker who stole my info has "privacy" rights as well.

The thing that blew me away was that the IRS and Social Security Administration both knew my SS # was being used by other people.  When I tried to log into my SS account, it was locking me out, because my information was not matching their records fully, indicating that somebody had been fucking around.  The IRS knew my number was being used by somebody else as well.  And the people at both agencies I talked to both admitted my information was being used.

It's like "hey you stupid chucklekfucks, get your COBOL programmers out of retirement, and start pulling information out that would easily catch and stop these people."  Nobody should be able to open up jack shit with my SS# and a different name.

  • Author
9 minutes ago, B00M said:

To change your DL # you must report it lost/stolen to local PD and get a report #. I called 311 and told them of the notification and got a call back about 24 hours later.

Was told straight up that someone even physically stealing your DL does not meet DPS protocol to change the #. I have to be the victim of ID theft and there's nothing preventive I can do on this front.

Social Security Administration is worse:  They change a few dozen numbers a year, and I didn't meet the criteria, because my information was used for financial gain.  I was told the person who stole my info would basically have to be stalking me, and present a physical threat to me, and I'd have to have that documented with law enforcement.

They could absolutely fix this shit - it's not hard to run a database query and pull every number that has more than one name attached to it.  This came out before it happened to me, but still applies.

https://www.nbcnews.com/technolog/odds-someone-else-has-your-ssn-one-7-6C10406347

Quote

What are the odds someone else has used your Social Security number? One in 7.

That's the stunning conclusion of a San Diego company's analysis of 290 million Social Security numbers, which found that 40 million of them have been attached to more than one name. The study, conducted by the fraud-fighting firm ID Analytics, is the first of its kind that's been made available to the public.

Quote

The IRS often knows when this happens, when the imposter pays taxes. The Social Security Administration knows, too, for the same reason. And the nation's credit bureaus usually know, because the imposter often ends up applying for some form of credit.  Plenty of financial institutions also have access to this information.

But no one is telling you. In short, all these government agencies and financial firms don't think you have a right to know.

 

Yeah, I still don't get why our government doesn't care about online and identity theft fraud. There was something on 60 minutes awhile back and the FBI said they had too much other stuff to worry about. That excuse for me doesn't hold water. Organized crime is huge from programmers who hack Real estate agents and escrow agents to telemarketers who solicit information to fraudulent online sites that all use the same contact info. And the less the government does the more widespread the fraud gets and the more emboldened the bad guys get.

The entire story is inaccurate because nobody in Texas has a Texas Driver's License.

We have Texas Driver Licenses.

1 hour ago, atomheartbevo said:

It goes back decades and includes dead people, people who moved out of Texas, etc. and I believe it includes ID's.

In other words, registered voters...

35 minutes ago, Huckleberry said:

The entire story is inaccurate because nobody in Texas has a Texas Driver's License.

We have Texas Driver Licenses.

Yes, but a Texas Driver License could be referred to as a license belonging to a Texas driver

It's still safe to post a pay stub on Surly, though?

There’s a few quite entertaining, well-produced videos on YouTube illustrating how using SSN as one of the main elements of personal identification is one of the dumbest ideas in existence.  For a country as advanced as the US, it is actually unfathomable.

 

Other countries have national identity cards, and especially they implement many mobile-based / 2fa authentication to access official services (gov, taxes, finance, etc) and it’s extremely secure and effective

 

  • Author
1 hour ago, slorch said:

In other words, registered voters...

Try voting with a dead person's information.

2 minutes ago, atomheartbevo said:

Try voting with a dead person's information.

goddammit.  Just fucking laugh, dude.

  • Author
1 minute ago, slorch said:

goddammit.  Just fucking laugh, dude.

LOL, sorry long day.

  • Author
2 hours ago, Bevo said:

Yeah, I still don't get why our government doesn't care about online and identity theft fraud. There was something on 60 minutes awhile back and the FBI said they had too much other stuff to worry about. That excuse for me doesn't hold water. Organized crime is huge from programmers who hack Real estate agents and escrow agents to telemarketers who solicit information to fraudulent online sites that all use the same contact info. And the less the government does the more widespread the fraud gets and the more emboldened the bad guys get.

Even if they don't want to investigate it, all the SSA, IRS, etc. have to do is flag any SS #'s being used by more than one person/address, determine the legitimate person and address (which wouldn't be hard), and then flag those numbers when they get used.  Employer files taxes/etc., IRS comes back with a notice that the SS # does not belong to that person.  Credit cards, loans, etc. can only go to the proper address on record.   

These are just simple checks in a database.

Like @52-80 said, it's bad.  Some have floated the idea that SSA/IRS don't want to fuck with it, because it's bringing in money.

 

10 minutes ago, atomheartbevo said:

 

 Some have floated the idea that SSA/IRS don't want to fuck with it, because it's bringing in money.

 

Another topic tangential to this is the requirement that every person has to file taxes yearly, despite the fact that the IRS damn well can determine the “correct” taxes for most of these folks (the one whose sole income is w2).

 

Like, these fuckers know if you missed your wages by 50 bucks, or if you neglect 80$ of dividend, but apparently not knowing of declare taxes (which you simply confirm), or at least prefill the majority of taxes (which the filers can complete)

 

In other countries, individuals whose income is simply employment earned income, the withholding is properly withheld, so everything is already paid for and complete.  Individuals have a 5 year window to voluntarily file, if they dispute it.

 

It will save everyone a ton of fucking time and costs....except the tax filing companies e.g. Intuit lobby the gov hard to block any legislative efforts towards simplification of taxes

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.