Other posts related to identity-theft
Express Scripts + Identity Theft = EPIC FAIL
Lincoln Adams | September 23, 2009 @ 9:21 pmSo I get a letter in the mail last Monday, real bland looking envelope, looks like it might have come from my credit card company.
I open it up and it reads:
As we publicly reported last fall, Express Scripts, the company that administers (or previously administered) your prescription-drug benefit, received a letter in October 2008 from an unknown person or persons trying to extort money by threatening to expose millions of our member records. We immediately notified the FBI, and an investigation is ongoing.
I am contacting you because the FBI recently received additional information and as a result we learned that the unauthorized access to information included your name, social security number and date of birth and may also include prescription information. Although details regarding the situation are limited and we are unaware at this time of any actual misuse of your information, we believe it is important to notify you. We continue to investigate this matter and will further advise you if we become aware that your information has been misused.

My first thought was, “What in the flipping flip is Express Scripts???”, because prior to today, I had never heard of them. I did some googling and only found barebones info that indicated they were the third largest prescription benefit manager (PBM) in the US. Apparently my health insurance uses them (or used to at least), which would explain why I had gotten such a letter.
So I’m only now being told that crucially personal information about me had been STOLEN, 11 months later after the fact? Seriously?
I thought it had to be a scam, yet it turns out such a thing did apparently happen, since it had been reported by the NY Times (which explains why no one seems to know about it.) The letter also indicated that they set up a support site with more info and what I could do if I became a victim of identity theft, and that through them I would be able to use the services of a fraud prevention company called Knoll should I end up becoming a victim of identity fraud.
So basically I have to twiddle my thumbs and wait around to see if I eventually get butt boinked by the perpetrators who stole my ID. Great plan guys! First you scare me to death with this letter, and then tell me to adopt the wait and see approach, meanwhile somewhere out there some dude named Ivan Uvgunstoffgard is at this very moment placing a $50,000 order for a Mercedes using a newly minted gold card with my name on it. That’s just great.
Oh but wait, it gets better.
Because apparently, when the initial breach first occurred, only 75 names had been confirmed stolen, but recently it seems the number was much, much larger than that. A letter was also sent to New Hampshire AG indicating that almost 2000 people in that state alone have had their info stolen as well. I seriously doubt “millions” of records had been stolen, but this data breach was definitely bigger than earlier reported. They must have had some idea of the scope and who was at risk, so it would have been nice to have been apprised of this LAST YEAR when it happened, instead of waiting until it was actually confirmed that my info was included in the theft before notifying me.
Even though they did publicly report it, it seems they’re still trying to be low key about it all, so please allow me to help them out on this by SCREAMING AT THE TOP OF MY LUNGS TO ALL WHO CAN HEAR:
WARNING, WARNING, IF YOUR HEALTH INSURANCE/EMPLOYER USES EXPRESS SCRIPTS, YOUR PERSONAL INFORMATION MAY HAVE BEEN STOLEN
Sigh. On the upside, I had gotten my credit reports and scores from the three major credit agencies last July, months after the data breach, so if my info bad been misused during that time it would have showed up then. Still, I signed up for LifeLock as a precuationary measure (maybe I’ll send the bill Express Scripts too). After taking a harder look at what LifeLock had to offer, I’m surprised I didn’t sign up for it sooner, especially since I got a 20% discount and will only pay $8 a month for the year. 8 bucks a month for some peace of mind is a no-brainer, especially after getting a letter like this.
But just in case, I’m working on establishing a new alternative identity under the name Vincent Spankypants, a venture capitalist who owns various multi-million dollar properties around the US, including a favorite in Aspen, Colorado, where he can sometimes be found snuggling with a Ukranian blonde and roasting marshmellows by the fireplace. Totally believable identity if you ask me. 
Tags: express scripts, extortion, fraud, health insurance, identity theft, letter, lifelock, prescription drug benefit, social security number, stolen
Categories: Tangled Webs
(
Print This Post
| | 395 views )
A weekend in the life of the awesomeness that is me
Lincoln Adams | September 22, 2009 @ 10:27 pmSo how’d you spend your weekend Linc? I’m glad you asked me that!
Let’s start with Day 1:
My state FINALLY allows us to get our defensive driving certificate online rather than put up with the agony of attending a 6 hour course with a bunch of other dweeb nozzles looking to reduce their insurance costs, or because they drove through 5 red lights on their way to OTB while kicking back a Bud Light like the real men of genius that they are. The worst thing about these “courses” is the instructor telling us with a straight face what a traffic signal does, and that red actually does mean you have to stop. Oh, and of course the ever so popular “Let’s all go around the room and introduce ourselves and explain why we’re there” routine. I hate that crap. Just give me my toilet paper of a defensive driving certificate and let me be on my way, please.
I found the cheapest internet course and immediately signed up, only to realize yet again why New York continues to suck dangling donkey balls. Because you see, I’m required to do 6 hours, whether it’s online or offline, and the presentation I have to do is timed so you can’t fast forward to get to the end and do a quiz or whatnot to finish the course. Either way, I still have to waste 6 hours of my life. And just to make sure I’m not AWOL and swapping with a buddy while the presentation moves along, popup messages randomly appear that demands you call an 800 number and repeat a series of numbers which they use for voice identification purposes so they know you’re still you. All this to save $10 a month on my insurance? Yeah, I won’t be doing this again.
So that was Day 1. Enter Day 2:
I took a nice drive around and eventually found a roadside diner that had free wifi, so I dropped in and broke out my laptop while chowing down on a Texan grilled cheese sammich. The atmosphere was nice, you could see the sunset in the distance, and I’m feeling pretty good about things. My laptop boots up and…
Blue Screen of Death. 
I spent the next 30 minutes rebooting and ultimately failing to log into Windows, and dreading the thought that my laptop of almost 6 years had finally bit it. I needed it to last just a few more months too until I could replace it with a MacBook Pro. 
I wasn’t ready to toss in the towel just yet, so when I got home I went to work on it. I was still able to boot into safe mode, so I tried disabling drivers and a few other tricks, all to no avail. Finally I decided to look at what’s called a dump file for clues as to what caused the crash. A dump file gets created when you log back onto Windows after your PC flashes the blue screen of death on you. I found it but couldn’t even read it, so I started googling for more info. Apparently I needed a debugging tool to analyze it, so I downloaded it, clicked the file to install, and…
“The system administrator has set policies to prevent this installation.” 
This, despite the fact that I WAS the @#$%ing system administrator, and was logged in as such. I tried to install it again. No dice. So I googled some more, and tried a few registry hacks to make it stop giving me that message, and of course none of them worked. So I switched gears and installed the debugging tool on my desktop instead, then used my thumbdrive to download the dump file and upload it to my desktop.
Now it came to learning how to actually use this tool. I had no idea what to do with it, so I googled some more, and finally came across a series of instructions to help me weed out the relevant info from the dump file. It goes like this:
1. Open a command prompt (Start -> Run -> “cmd”)
2. cd \program files\debugging tools (Or wherever they are installed to)
3. kd -z C:\WINDOWS\Minidump\Mini???????-??.dmp
4. kd> .logopen c:\debuglog.txt
5. kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
6. kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
7. You now have a debuglog.txt in c:\, open it in a text edit (Notepad?).

I don’t think landing the Space Shuttle could be this complicated. Nevertheless, I followed the instructions carefully and was finally able to nail down the file name that my laptop choked on, a file called vsdatant.sys. I googled it and it was a file that belonged to ZoneAlarm, a firewall software that I had running on my system, though I hadn’t updated it in a while. So I uninstalled it, rebooted, and Windows finally came back up again!
Yaaaaaaaaaaaay, I had saved my lappie-top!!! 
I immediately started updating all my software, installed Service Pack 3 for WinXP, and rebooted several times to make sure the problem was truly gone. By this time it was after 4AM, so I patted myself on the back for a job well done, and went to bed. Woke up the next morning, feeling refreshed and happy, then booted up my laptop.
Blue Screen of Death. 
At this point I’m pretty convinced now it’s hardware related, most likely the memory. In one desperate last move, I raced down to the computer store to buy the only memory they had in stock compatible with my laptop, then raced back to swap my memory. I was pretty sure this would do it. It had to be the memory, right? It’s the only way my poor lappie could still be saved.
Blue Screen of Death. 
Sigh. I finally thought, @#$% it, and formatted the drive. I nuked everything and installed WinXP completely from scratch, and that my friends, is what finally resolved the issue. I only had to lose everything that was on my laptop to get it done too, though fortunately, I had copies of all my files on my desktop as well, so no big loss. But thank you so much, Microsoft, for designing the most cryptically ridiculous non-intuitive OS in creation. May you all rot in San Francisco.
I couldn’t stay mad though, I was happy enough to get my laptop back and running even better than before. I was planning to go on vacation next month and I would have felt naked not having it with me so I could blog on the road. 
After the laptop saga finally ended, I ran some errands and came back home late in the evening, satisfied in the knowledge that despite the fact that I got no rest whatsoever, I did get a lot accomplished. I get my mail and my happy karma is ruined once again by a disturbing letter that will be the subject of my next blog post. Nothing alarming really, just a quick note to let me know my personal info and social security number had been stolen and that I would imminently become a victim of identity theft and fraud. No biggie.
So how was your weekend? 
Tags: blue screen of death, crash, defensive driving, googling, identity theft, internet, internet course, laptop, mail, Microsoft
Categories: Lincoln's Personal Log
(
Print This Post
| | 48 views )
LifeLock Gets Picked
Lincoln Adams | May 22, 2008 @ 3:17 pm
Tee hee… 
…Lifelock customers in Maryland, New Jersey and West Virginia are suing Davis, claiming his service didn’t work as promised and he knew it wouldn’t, because the service had failed even him.
Attorney David Paris said he found records of other people applying for or receiving driver’s licenses at least 20 times using Davis’ Social Security number, though some of the applications may have been rejected because data in them didn’t match what the Social Security Administration had on file.
Davis acknowledged in an interview with The Associated Press that his stunt has led to at least 87 instances in which people have tried to steal his identity, and one succeeded: a guy in Texas who duped an online payday loan operation last year into giving him $500 using Davis’ Social Security number. (Source: Wired News)
I really have no comment other than to say there really is no such thing as security, and greedy lawyers totally suck the big one.
Tags: fraud, identity theft, lawsuit, lifelock, security
Categories: News Fit To Blog
(
Print This Post
| | 538 views )








Recent Activity