pull down to refresh

I had to provide some identifying information for a financial service recently and it got me thinking about how numb I've become to the constant stream of massive data breaches. I decided to spend a little time and take a look at how many major breaches have happened this year.
I had plans to include numbers of people affected by each of the breaches, but it turns out that most of the hacks now days don't bother providing a number. The internet is a very connected place and most of these data breaches involve companies who provide services to other companies who provide services to customers and if you dig into them it becomes clear that there isn't anyone doing a full accounting of this.

2024 Data breaches so far

DateCompany# of victims
2024-07-01AUTHY33mm
2024-06-26EVOLVE???
2024-05-30SNOWFLAKE100mm+?
2024-04-28DELL49mm
2024-03-30AT&T70mm
2024-02-21CHANGE HEALTH150mm
2024-01-16TRELLO15mm

KYC is the illicit activity

My takeaway from the depressing list below is that the only tenable path forward is to severely curtail the amount of information any company is allowed to collect. Obviously, this is the exact opposite of pretty much every current trend.
Perhaps the best outcome is that everyone's data is exposed and stolen and misused so often that it becomes useless for any sort of identity verification purpose and businesses and governments are left with no choice but to use public/private keypairs.
After posting this, it occurred to me that the problem comes from the fact that people make mistakes.
In the world of bitcoin, your private key is your bitcoin. There are no do overs. Obviously, if all of life functioned this way, it would be challenging. Imagine if you lost your house if you lost your key, or if you lost legal custody of your children if you lost your key.
Instead we have courts. And on the internet we have a horrible contorted process that is full of holes but doesn't carry the same all or nothing consequences of a keypairs system.
Navigating what will happen to your real world things if you accidentally lose or expose your private key will probably always be an impediment to fixing the data breach problem.
reply
Sure, mistakes are made, but credit cards going from number (i.e. private key) to pin and chip (generating a token for each transaction) reduces the impact of a data breach tremendously. An individual can still screw it up, but they could lose their entire credit card before too. At least now it's only user error to worry about and not the centralized honeypots of user data.
reply
AT&T is facing multiple class action lawsuits related to a data breach in multiple jurisdictions. What made me sad though that media was very happy that they accepted there was a breach.
reply
I was thinking about exactly this recently. Each of these should have been Earth-shattering news, and yet life just goes on like nothing happened.
Will there ever be massive ramifications of these breeches? I have no idea, but it doesn't seem far-fetched.
reply
117 sats \ 0 replies \ @bisdak 4 Jul
Add: Philippine’s Jollibee Food Corporation 11mm customers
reply
27 sats \ 1 reply \ @plebpoet 4 Jul
add Ticketmaster to the list
reply
The snowflake breach is where the Ticketmaster data came from, and Santander Bank and LendingTree and Neiman Marcus and Advance Auto Parts...
Snowflake is a cloud data provider that was storing data for these and a ton of other companies.
reply
The fact that these companies are so bad at data protection yet keep asking for MORE data is insane, like no consequence for this incompetence?
reply
Yes, Kyc is worst thing to happen and all these companies are however trying hard to address all of their misdoings but how far they can go!
reply
The way to solving this issue is to eliminating KYC all together. Any type of KYC will become a honeypot for hackers. Very sad to see companies have such large data breaches, and untold amounts of data being stolen.
reply
It's understandable to feel overwhelmed by the constant news of data breaches. Your suggestion to limit the amount of information companies collect is a practical one, especially in a world where data security can't always be guaranteed. Implementing stricter data collection policies and shifting towards more secure methods like public/private keypairs for identity verification could indeed reduce the impact of these breaches. While it's a significant shift from current practices, it might be necessary to better protect individual privacy and security in the long run.
reply
sometimes, Implementing KYC measures can be costly and burdensome for financial institutions, especially smaller ones, lets not forget The risk of data breaches can expose sensitive information, leading to identity theft and other malicious activities.
reply
Its been really bad lately with data breaches. Best too try to keep your information off of their servers as much as you can.
reply
I get that a lot of services could work without saving customer data & KYC
But e.g. AT&T? How would that work? Nut storing passwords because salt and hashed, fine. Maybe they don't necessarily need a name either. But an email address for contact or the address for where to deliver the internet connection to? How?
reply
How does AUTHY a standalone 2FA app store user data in the first place??
reply
Perhaps the best outcome is that everyone's data is exposed and stolen and misused so often that it becomes useless for any sort of identity verification purpose and businesses and governments are left with no choice but to use public/private keypairs.
đź‘Ť
reply
When it comes to kyc it's good to be done it also comes with major flaws the method of safeguarding them and using places etc now a days no person in safe with hacks and data breaches and false identities we need more secure methods like encryption using cryptography etc
stackers have outlawed this. turn on wild west mode in your /settings to see outlawed content.
deleted by author
reply