Free credit report site appears to be source for celebrity data

Hackers successfully answered a series of questions, enabling them to download reports, according to a source

A website that provides US consumers with a free annual credit report appears to have been the source used by hackers to download those of celebrities including Beyoncé and government officials including Federal Bureau of Investigation Director Robert Mueller.

On Tuesday, a website called "Exposed.su" published Social Security Numbers, previous addresses, and birthdates of a range of well-known people, including former Secretary of State Hillary Clinton, Jay Z, Michelle Obama, Vice President Joe Biden, Hulk Hogan, Donald Trump and U.S. Attorney General Eric Holder, among others. In the hacker world, the practice is known as "doxing."

An FBI spokeswoman confirmed the agency is investigating the breach. All told, hackers released information on 20 people, but credit reports were not available for every victim.

Some of the personal data included credit reports from TransUnion, Experian and Equifax, the three main U.S. credit-rating agencies. Equifax spokesman Tim Klein said the source for the credit reports appears to be "Annualcreditreport.com" and not the result of a breach of the credit reporting agencies' databases.

Annualcreditreport.com was set up by the three credit agencies to allow consumers to download a free credit report annually, according to the U.S. Federal Trade Commission. The website, which is managed by a company based in Atlanta called Central Source, could not be immediately reached.

Consumers are asked as many as six specific questions related to recent payments in order to gain access to their report, such as how much their mortgage payment is or the last payment made on a credit card they hold.

In this breach, it appears the hackers nailed all of those questions accurately for some of the victims, indicating they may have access to other sources of information on victims as well. According to dates on the credit reports, several had been pulled in the last few days.

"This is really detailed information," Klein said. "It appears that some fraudsters were able to get this sort of personally identifiable information on some celebrities and therefore were able to go through this website and access some elements of their credit report."

Identity thieves are known to do meticulous research on their victims, but often a surprising amount of personal detail is often freely available online.

Klein said it has been confirmed four people had their information accessed through Annualcreditreports.com, but some of the published information is inaccurate.

TransUnion said in a statement its systems were not hacked. The fraudsters had "considerable amounts of information about the victims" already, which enabled them to illegally access the credit reports, it said.

"TransUnion is taking steps to assist the individuals affected to help minimize any potential impact," the company said. "We are conducting our own internal investigation and working closely with law enforcement."

Exposed.su has a country code top-level domain of ".su," which was assigned to the former Soviet Union but is still in use. Those running the website appeared to be using CloudFlare, a San Francisco-based company that provides a worldwide network of data centers intended to speed the delivery of web pages and reduce bandwidth. It was unclear which company is providing hosting services.

A Twitter feed for Exposed.su has already been suspended. The two posts on the feed appeared to be written in Russian, according to a snapshot from Google's cache.

The tag line for the Exposed.su site, which was still up as of Tuesday evening, read: "If you believe that God makes miracles, you have to wonder if Satan has a few up his sleeve."

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags U.S. Department of Justicesecuritydata breachdata protection

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Essentials

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?