Credit reporting firm Equifax just announced it was the victim of a “cybersecurity incident” that impacted as many as 143 million people in the United States. The information accessed included social security numbers, birth dates, and addresses. In a few cases, credit card and driver’s license numbers were accessed, too.
For those potentially impacted, Equifax has already set up a website (you can check if you’re impacted at the bottom of the page). The catch is, if you want to learn if your information–including your social security number–was compromised, you have to enter the last six digits of your social security number. (Some customers are tweeting that the site doesn’t work the way it’s supposed to.) So, customers of a service intended to protect personal information are now being asked to enter the very data that’s supposedly protected to learn if it’s not. Seems a bit circular, no?