LifeLock’s Customer emails made Vulnerable
Per Krebs, “Identity theft protection firm LifeLock — a company that’s built a name for itself based on the promise of helping consumers protect their identities online — may have actually exposed customers to additional attacks from ID thieves and phishers”.
Here’s what we know so far:
- LifeLock, an identity protection company, has put millions of customer emails at risk for phishing and identity theft attacks, thanks to a bug on its website.
- The bug enabled customer email addresses to be harvested by simply changing one number in the URL of a web page used by customers to unsubscribe from LifeLock communications.
- It’s important to note that this is not a breach, but it is a vulnerability to pay attention to, since ID thieves can use email addresses to steal other personal info.
How to protect your info:
Here are some tips to help you protect yourself:
- Be skeptical of email communications urging you to take immediate action or claiming that they are privacy policy updates.
- Do not click on any suspicious-looking links in those messages and instead forward any suspicious email to the company itself. Call the company directly to confirm whether any such messaging is actually from them.
- Do not enter any personal info or credentials via links in emails. If you need to make updates, go directly to the company’s website to do so.
- Check your credit report regularly to keep an eye on any unauthorized activity.
- Consider locking your credit file to help prevent potentially fraudulent access.
Reference:
LifeLock Bug Exposed Millions of Customer Email Addresses – https://krebsonsecurity.com/tag/lifelock/