NCSAM 2013: Identity Theft Prevention Marc Scarborough Information Security Officer Rice University marcs@rice.edu
Agenda NSCAM Plug Identity Theft General Steps Five Simple and Free Steps to Protect your Identity Other Options Children Online Questions?
NCSAM : Win Prizes! (and learn about security) It s National Cyber Security Awareness Month (NCSAM) http://vpit.rice.edu/ncsam Something new this year: CyberSecurity Self-Check http://vpit.rice.edu/selfcheck.aspx Participate online or in person to be entered to win: Free lunch from the Whoo Deli Starbucks gift card Chocolate Bar gift card Apple TV The more you participate the more entries you have for the drawings!
Identity Theft The unauthorized use of your personally identifiable information, or PII, to commit fraud or other crimes. Criminals use your information to make purchases with your credit cards, open new accounts for loans, phones and utilities, and may even use the stolen identity during an arrest so that the charges show on your record rather than theirs. According to the FTC (Federal Trade Commission), as many as 9 million Americans have their identity stolen each year. Identity theft has been the number one consumer complaint registered with the FTC every year since 1999. The average victim of identity theft spends $631 in out-of-pocket costs and 59 hours working through issues with banks, creditors and other financial institutions.
General Steps Protect your Information Keep important documents like your social security card and financial documents in a safe place in your home (actually a safe is a good idea). Only keep what you need - shred or otherwise safely destroy data you don t. Protect your Devices Keep your computers and devices updated with security patches. Use encryption on mobile devices that house your private information. Be sure to completely erase computers and devices according to manufacturer specifications before selling or donating them.
Five Simple and Free Steps to Protect your Identity 1. Monitor Credit Reports 2. Set Up Fraud Alerts 3. Opt-out of Credit Offers 4. Establish Bank Alerts 5. Review Monthly Bank Statements
1: Monitor Credit Reports You are entitled to free, annual credit reports from all three major credit agencies (TransUnion, Equifax, and Experian). Visit http://www.annualcreditreport.com There are three, so choose one to review one every four months. This will allow you to spread out your free credit reports over the year. For example: Use the site to request your credit report from Experian in January, TransUnion in May, and Equifax in September. Then start the process over again in January. This should be done every year.
2: Set Up Fraud Alerts Setup a Fraud Alert with one of the three agencies. They will report this to the other two agencies automatically. Visit https://www.alerts.equifax.com/autofraud_online/jsp/fraudaler t.jsp With an initial fraud alert, potential creditors must use what the law refers to as reasonable policies and procedures to verify your identity before issuing credit in your name. However, the steps potential creditors take to verify your identity may not always alert them that the applicant is not you. This should be done every 90 days.
3: Opt-out of Credit Offers This will reduce the number of credit offers you receive in the mail and via the phone. It also helps reduce the problem of criminal dumpster diving. The less mail that your mailbox and trash cans see the better! Visit: https://www.optoutprescreen.com/ This should be done every 5 years.
4: Establish Bank Alerts Most banks offer this for free. Great early warning system if someone other than you is using your account. Use especially for accounts that do not see normal activity, like emergency cards and balance transfer accounts. Check as needed. The alerts should be reviewed every six months.
5: Review Monthly Bank Statements Your statements provide some of the biggest indicators of potential identity theft. Look for payments you don t recognize: Large purchases should stand out. Some smaller or recurring payments. Payments to services you don t use. This should be done every month.
Another Option: Credit Freeze This restricts access to your credit report. Potential creditors and other third parties will not be able to get access to your credit report unless you temporarily lift the freeze. Placing a credit freeze does not affect your credit score nor does it keep you from getting your free annual credit report, or from buying your credit report or score. Credit freeze laws vary from state to state. Texas: Free for identity theft victims, $10 per agency for everyone else ($30 total). To apply for new credit the freeze has to be lifted It takes time, up to three business days after receipt of the information. It also applies to background checks! A freeze is very effective, but can make buying a new car or home or getting a new job very difficult.
Notes: Children If the child is 14 years or older they can use the same procedures as adults. If the child is 13 years or younger and you want to see if someone is trying to get credit in their name: Fill out a form and send in copies of: 1. Government ID Card (like driver's license) 2. Proof of address 3. Copy of the child's birth certificate 4. Copy of the child's Social Security Card 5. Child's name and DOB It is against the law to collect personal information of children under 13 years of age (Children's Online Privacy Protection Act). FYI: It s why Facebook and others require users to be 13 years old in the USA. http://www.coppa.org/coppa.htm
Thank you! Questions? Anything I missed I should have covered?
IT Security Office Marc Scarborough IT Security Officer marcs@rice.edu 713-478-2183 Albert Ball Senior IT Security Analyst alball@rice.edu Peseng Yu IT Security Analyst peseng.yu@rice.edu