Started By
Message

So I think my identity was stolen

Posted on 3/23/16 at 4:45 pm
Posted by The Spleen
Member since Dec 2010
38865 posts
Posted on 3/23/16 at 4:45 pm
Logged into my bank account last week and saw a payment to one of my credit cards went through, paying off the balance. I don't have it set up for auto draft, and didn't set up a payment, so I called the credit card company. They immediately reversed it, cancelled the card, and said they were sending me a new one. They also said there were two suspicious charges they asked me about and I confirmed I did not make them, so they removed them. Logged into the account and changed the password, and figured I was done other than signing the affidavit they're sending me. Still have no idea how they made the payment with my bank account info. It is saved in my online account, but anytime I've tried logging in from a different computer, they text me a verification code I have to enter before signing in.

Last night I get a call from my other credit card company asking if I had requested another account with them. I never use this card anymore and just keep it open to help my credit score. I told them I did not, and they rejected the application and said they were opening a fraud case and someone should be calling me. Went ahead and had them cancel the card I had and issue me a new one. Also logged in and changed the password to that account.

I've called Experian and put a fraud alert with all 3 credit agencies and got a copy of my credit report from all 3. There's nothing on any of the reports suspicious.

Anyone been through this and can give some advice on anything else I should do? I've had my credit card compromised before, but never had someone try to open an account with my info. Just glad I already had an account with that company(Citi) otherwise I imagine the application would have been approved.
Posted by boosiebadazz
Member since Feb 2008
80187 posts
Posted on 3/23/16 at 4:49 pm to
I don't have the slightest bit of advice, but I think it was very courteous of that thief to pay off your balance as his first move.
Posted by The Spleen
Member since Dec 2010
38865 posts
Posted on 3/23/16 at 4:54 pm to
I thought so too, but the rep on the phone said they sometimes do that so it frees up more credit for them. The attempted charge was at a Best Buy for around $4,000. The limit is $25,000 and there was only about $900 on it, so they would have been fine.
Posted by Iowa Golfer
Heaven
Member since Dec 2013
10229 posts
Posted on 3/23/16 at 4:58 pm to
I had it happen. I changed my SSN. Changed my DL#. I also had both my personal, and my business computers deep swept (or whatever it's called) to see where it came from.

One of my brokerage account numbers was for sale on a foreign web-site, and an attempt was made to withdraw a large amount I had sitting in cash.

I have a security chi, which is a number randomizer that transits to whatever computer I'm using (my understanding of it anyway). So I enter my user name, and enter my password. I hit the button on the security chip, and then I enter the random 6 digit code after my password(s).

None of my checks have anything other than my name, or business names on them. No address. No telephone numbers. Nothing, my name, my routing number and account number. No other information to make it easier on someone.

My homeowner's policy has ID theft on it as an added coverage. I carry cyber liability on all of my businesses. My main business I host our server on two separate off site servers, and the liability of loss of customer's info is theirs, not mine.

That's all I remember. It was a hassle, but not as bad as I thought it would be.

I think the first thing you need to understand is what is your personal maximum liability. It's likely small if this is a personal issue, and not an issue at your business.



Posted by The Spleen
Member since Dec 2010
38865 posts
Posted on 3/23/16 at 5:21 pm to
Yeah probably the only thing I'm really worried about is my bank account. The credit card companies are really good about catching this, and all of my accounts have fraud protection, so there is no liability there.


I do use my debit card more than I probably should, so probably need to get a new one and move to using a credit card for all purchases, and cash or check for places that don't take a credit card.

I am concerned it originated from my home computer because one of my wife's credit cards had some suspicious activity on it a couple of months ago, and that's the only place where both her accounts and my accounts have been accessed. Could just be a coincidence, but that's too coincidental for my comfort.
Posted by LSUFanHouston
NOLA
Member since Jul 2009
37034 posts
Posted on 3/23/16 at 5:30 pm to
I'd probably ask your bank where your checking account is, to close your account and give you a new one. New account number, new checks, new debit card, etc.

If you or your wife have any other accounts, I'd probably call them and ask for a new card as well.

Your last post about your computer is concerning. Is there anyone out there that could have had physical access to your computer? Someone in your house, a maid, etc?
Posted by The Spleen
Member since Dec 2010
38865 posts
Posted on 3/23/16 at 5:48 pm to
Probably a good idea to open new accounts.

Meant to add we've already requested all new cards with our credit card companies. I just have the 2, and the wife has just 1 plus a 2nd card on one of my accounts, so that wasn't much of a hassle.

No, nobody has access to that computer. We don't have a maid or anyone coming in our house I'd be suspicious of. Plus the laptop stays in our bedroom for the most part and not many people go in there. I ran a few scans(Malware Bytes, Avast AV) on it earlier, but they didn't find anything. I know that's not conclusive, and I'm not really tech savvy enough to do much beyond that.
Posted by Jabstep
Member since Jul 2014
2130 posts
Posted on 3/23/16 at 6:20 pm to
Houston,

One of the main reservations I have about doing some returns/bookkeping on the side is cyber security for clients. Are accounting firms liable if there is a breach? Could there be personal liability? Does E&O insurance cover it?

Posted by Jabstep
Member since Jul 2014
2130 posts
Posted on 3/23/16 at 6:21 pm to
quote:

My main business I host our server on two separate off site servers, and the liability of loss of customer's info is theirs, not mine.


Do you have them sign some type of form or something stating this?
Posted by Iowa Golfer
Heaven
Member since Dec 2013
10229 posts
Posted on 3/23/16 at 7:38 pm to
Yes. I have a contract, and that part is spelled out pretty clearly. I also carry insurance on any responsibility I would have in losing customer's data.

So if the cloud servers lost data, and a suit was brought against myself, or the corp, alleging I shouldn't have had it on the cloud servers, I'm covered for that as well.

Ultimately, I'm in custody of their data, so I limited my exposure and insured to the extent possible.
This post was edited on 3/23/16 at 7:42 pm
Posted by Jabstep
Member since Jul 2014
2130 posts
Posted on 3/23/16 at 8:30 pm to
quote:

Ultimately, I'm in custody of their data, so I limited my exposure and insured to the extent possible.


You get a lawyer to write this contract for you? The reason I ask is because I have similar concerns about starting a side business for tax/bookkeeping work.
Posted by Iowa Golfer
Heaven
Member since Dec 2013
10229 posts
Posted on 3/24/16 at 11:29 am to
It's a large provider, who also licenses our management system. Really a management system provider, who also hosts, and specific to our industry. There wasn't a lot of room to negotiate, but their contract spells out their liability.

I did not have my/our attorneys reviews this as it was spelled out pretty clearly, and I also carry cyber liability. So either they're on it, or I'm insured to the extent possible.

Pretty routine thing in my industry, otherwise, yes, our attorneys would have had input.
Posted by GoIrish02
Member since Mar 2012
1390 posts
Posted on 3/24/16 at 12:02 pm to
quote:

Are accounting firms liable if there is a breach? Could there be personal liability? Does E&O insurance cover it?


Yes, any firm that handles customers'/businesses' Personally Identifiable Information is responsible for the information.

Your E&O probably covers the third party damages in the event of a breach, but it doesn't cover your first party costs, which probably equal if not exceed the third party damages. You need cyber coverage for this risk, check with your trade association for a cyber program.
Posted by LSUFanHouston
NOLA
Member since Jul 2009
37034 posts
Posted on 3/24/16 at 2:02 pm to
Our firm has a full time IT manager and not a day goes by that he's not talking about cyber security issues of some sort. So yes, it is an issue.

We have some side policy riders that protect us in the case of a breach. Well, protect us as best as we can.

We have a mix of cloud based services and stuff hosted on our local servers. If you were to go out on your own, it probably would be more cost-effective for you to do as much in the cloud as you can. However, you need to really make sure you understand how secure your information is.

I'd talk to Camico or CPAI. Definitely CPAI if you are an AICPA member. I know they offer a separate cyber liability policy in addition to E&O, and since they cover a lot of sole prop practices, they may be better able to assist you than Camico can.
Posted by txtiger79
Member since Oct 2007
1014 posts
Posted on 3/24/16 at 4:09 pm to
Kill the debit card. Just get an atm card with no debit feature. If you have a credit card, you don't really need a debit card.
Posted by Gevans17
Member since Dec 2007
1135 posts
Posted on 3/24/16 at 6:21 pm to
have you filed your tax return yet? if your return gets kicked back as a "duplicate return" you'll know what happened.
Posted by txtiger79
Member since Oct 2007
1014 posts
Posted on 3/24/16 at 7:56 pm to
Yeah I was going to suggest requesting a pin from the IRS for your tax filing if you haven't filed yet. Not sure the process there.
Posted by Gevans17
Member since Dec 2007
1135 posts
Posted on 3/24/16 at 8:37 pm to
PIN # doesn,t prevent someone else from beating you to your own refund.
Posted by The Spleen
Member since Dec 2010
38865 posts
Posted on 3/25/16 at 9:23 am to
Yes, filed already and it's been accepted so no worries there.


Posted by Zach
Gizmonic Institute
Member since May 2005
112423 posts
Posted on 3/25/16 at 10:20 am to
"I think someone stole my identity."

"Why do you think that?"

"He sent me an email saying 'stop making racist comments on the Internet. You're ruining my reputation."
first pageprev pagePage 1 of 2Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram