Here’s the most disturbing thing about the Uber hack

Published: Wednesday, November 22, 2017 @ 4:07 PM

Ride-sharing service Uber is being maligned again after the company announced Tuesday that it suffered a massive cybersecurity breach last year. The hack exposed the data of more than 57 million riders and drivers that use the Uber app, one of the most successful tech companies of the past five years.

The cybersecurity incident comes a few months after the Equifax data breach, in which hackers exposed as many as 145.5 million people to identity fraud.

The most disturbing aspect of the Uber data breach

While data breaches have unfortunately part of doing business in this information age, the most disturbing thing about these recent incidents are the timelines: Both Equifax and Uber waited a significant amount of time to alert their customers and users.

In the Equifax case, criminals accessed the Atlanta-based company’s computer system on July 29. The public was not told of the hack until September 7, more than a month later.

For Uber, the breach occurred “late” last year, but we’re just now hearing about it mere weeks before we ring in 2018. These companies aren’t the only ones waiting a while before they tell their customers of security problems.

Yahoo didn’t disclose two breaches it experienced until two years and three years respectively went by, of course for most of that time the company said it was unaware of the hacks.

The delays — at best — seem to signal that companies are still unsure of when and how to communicate bad news to their customers. At worst, the slow responses could show a callous disregard for the personal information of others.

To make matters worse, Uber reportedly said that it paid hackers $100,000 to keep the breach secret.

Of course, there are valid reasons why companies wouldn’t quickly disclose breaches, such as cases where law enforcement agencies is tracking the hackers and want to continue to accumulate info that would lead to a bigger fish, so to speak.

Another reason why companies are slow in reporting hacks is that different states have particular notification processes that must be followed. Forty-Eight states, D.C., Guam, the Virgin Islands and Puerto Rico all have statutes on the books related to breaches, according to the National Conference of State Legislatures website.

And there’s always the explanation that the higher-ups are always the last to know. In a statement, CEO Dara Khosrowshahi, who was appointed in August, said that he too was kept in the dark about the incident.

“I recently learned that in late 2016 we became aware that two individuals outside the company had inappropriately accessed user data stored on a third-party cloud-based service that we use,” Khosrowshahi said. “The incident did not breach our corporate systems or infrastructure.”

He said that outside forensics experts haven’t found any evidence to lead them to believe that users’ trip histories, credit card numbers, Social Security numbers or dates of birth were downloaded.

The data that was accessed though includes the names and driver’s license numbers of around 600,000 drivers in the United States. Also, some personal information of 57 million Uber users around the world, including the drivers described above.

What to do if you’ve been exposed to a data breach

At this point, Uber is saying that it has “seen no evidence of fraud or misuse tied to the incident.” But that doesn’t mean anything going forward, as crooks may be able to take out new lines of credit in your name for the foreseeable future.

Unfortunately, consumers exposed to data breaches will have to keep safeguards in place for the rest of their lives.

Sign up for Credit Karma’s free credit and ID monitoring service

To protect your identity, money expert Clark Howard advocates signing up with Credit Karma’s free credit monitoring service.

The service not only gives you unlimited access to your credit reports anytime you need them, Credit Karma also has a identity theft service— all for free. We’ve written about how to sign up for the credit service as well as the plan to monitor your personal info for identity fraud.

The next thing you need to do is to ensure that no one else can open up an account in your name.

Freeze your credit

Clark says that to freeze your credit, you need to contact Equifax. Experian and TransUnion. See our Credit Freeze Guide, which shows you step by step how to go about freezing your credit.

5 fast facts that will help make filling out FAFSA a breeze

Published: Wednesday, December 13, 2017 @ 10:32 AM

The following points are what you need to know, as well as common mistakes to avoid when filling out the FAFSA Fill it out – you have nothing to lose The sooner you submit your FAFSA, the better Gather the information you'll need Watch out for common mistakes like leaving fields blank Keep an eye out for requests for more information

It's that time of year again when parents and college or college-bound students fill out the FAFSA (Free Application for Federal Student Aid).

The idea of wading through a form – especially one that requires financial information – is definitely not an appealing idea, but the FAFSA could be a tremendous help in getting your student money to attend college.

RELATED: 20 financial aid terms every college student and parent should understand

The following points are what you need to know, as well as common mistakes to avoid when filling out the FAFSA.

Fill it out – you have nothing to lose.

You may think that you don't need to fill out the FAFSA, especially if you believe you might not qualify for need-based aid. But there's no income cut-off point with federal student aid, according to the U.S. Department of Education. In addition, the FAFSA can help you qualify for all kinds of grants, loans and scholarships, including those offered by your state, school or private organizations.

By investing a few minutes of time, you could reap thousands of dollars in potential rewards.

Submit it ASAP.

The sooner you submit your FAFSA, the better, according to consumer adviser Clark Howard. Although the federal deadline isn't until June 30, 2018, you should check with the financial aid administrator at colleges you're interested in to make sure their deadlines aren't earlier.

Submitting earlier will help you plan how you'll pay for college. You'll also have a better chance of getting as much aid or scholarship money as possible since some colleges distribute their available money on a first-come, first-serve basis, Howard says.

Gather the information you'll need.

The FAFSA asks questions about the student as well as his or her parents if the student is a dependent.

You'll need the following information on hand as you fill out the FAFSA:

  • The student's Social Security number
  • The parents' Social Security numbers
  • Driver's license number (if you have one)
  • Alien registration number (if you're not a U.S. citizen)
  • Federal tax information for the student (and his or her spouse, if applicable) and the parents. This can often be imported online, so you may not need your records.
  • Information on the student's and parents' assets, such as money held in bank accounts and real estate holdings (not your primary residence)
  • Records of the student's or parents' untaxed income, such as veterans benefits and interest income

Watch out for common mistakes.

The National Association of Student Financial Aid Administrators points out some common mistakes that can delay your form's submission or cause you to not get the aid and scholarships you might qualify for. They include the following:

  • Leaving some fields blank – Instead, put in a "0" or "not applicable."
  • Listing an incorrect Social Security or driver's license number – It pays to recheck these numbers.
  • Failing to use your legal name – Use the name on your Social Security card, not a nickname.
  • Forgetting to list colleges – Even if you're not sure of which college you'll be attending, add any reasonable possibilities to the list of colleges that will receive your information. You're under no obligation to apply to or attend these colleges, and they can't see which other colleges you're interested in.

Keep an eye out for requests for more information.

Your FAFSA may be selected for verification, which means you'll have to provide some additional or supporting information, U.S. News & World Report explains. This process doesn't necessarily mean you've done anything wrong. You may have a discrepancy or mistake on your form, but some FAFSAs are just randomly selected for verification (lucky you!).

These requests will often come to the student's personal email account or university email address, so he or she will have to be diligent about checking it and responding to any requests by the stated deadline.

Related

Is credit monitoring a scam?

Published: Wednesday, November 22, 2017 @ 12:01 PM

Clark Howard explains how to protect yourself.

With the recent massive security breach of Equifax — one of the three credit bureaus with which many may have thought their private information was safer than most — now many people are dealing with more insecurities, wondering where they can entrust their private information, if anywhere.

Here are some options:

Credit freezing

Better and cheaper than credit monitoring, an option for optimal security is freezing your credit through each of the three credit bureaus (Experian, Equifax and TransUnion), according to WSB money expert Clark Howard at Clark.com.

The fee is $3 to $10 per person per bureau, depending on your state, to allow you to seal your credit reports — except now it's free with Equifax from here on out due to the recent data breach.

You will be provided with a personal identification number (PIN) that only you know and can be used to temporarily unfreeze (or "thaw") your credit when legitimate applications for credit and services need to be processed such as when you are buying a car.

This added layer of security means thieves can't establish new credit in your name even if they are able to obtain your personal information.

LifeLock vs. CreditKarma.com

While LifeLock advertises it can help consumers secure their information to guard against identity theft, LifeLock charges monthly services that start at $10 a month.

This kind of credit monitoring is not the same or as effective as a credit freeze, said Craig Johnson for Clark.com.

Instead, he recommends CreditKarma.com for free credit monitoring.

Equifax

If you haven't already frozen your credit, now would be the time since Equifax recently got hacked and the information of possibly 145.5 million people was attained by these hackers.

Information accessed primarily includes names, social security numbers, birth dates, addresses and, in some instances, driver's license numbers.

To try to compensate, Equifax is offering free identity theft protection and credit file monitoring (but only through Jan. 31, 2018) with its TrustedID Premier.

Experian

Another point of confusion is the unsolicited free Dark Web Email Scan offered by Experian to your email, leading to a monthly fee for further scanning.

Experian IdentityWorks also offers a free 30-day trial membership for identity theft protection and resolution, involving a monthly automatic deduction of $9.99 for the plus plan or $19.99 for the premium plan.

It's free to cancel within the 30-day trial period, but the consequences are not revealed up front for those who decide to cancel their membership once the monthly fees begin.

TransUnion

The third credit bureau, TransUnion, also offers credit monitoring at $19.95 monthly. However, TransUnion says it offers free identity protection through its TrueIdentity program.

Free helpline

Those with specific questions about the Equifax breach and how it may impact them may contact Howard's Consumer Action Center — a free helpline open 10 a.m. to 7 p.m. EST Monday through Friday with Team Clark volunteers available to answer concerns at 404-892-8227.

Related

4 of the best ways to turn your home into a cash cow

Published: Friday, November 17, 2017 @ 4:17 PM

Sites like Airbnb let you rent out your home to make money.
Sites like Airbnb let you rent out your home to make money.

Your house is a large expense with many associated costs like a mortgage payment, insurance, maintenance and more.

RELATED: How to Cash In on Short-Term Rentals Like Airbnb, VRBO

It provides a roof over your head, of course, but since it usually costs you money each month, why not put it to work for you and earn some cash in the process?

The following are four ways your house can make you money:

You can relax on the lake, in the woods or even in the back of a van when you're looking for a staycation in Gwinnett County.(Airbnb)

List your home with Airbnb or VRBO.

If you're planning to be out of town for a few days or don't mind bunking with a friend, you may be able to make some money by renting out your home through sites like Airbnb and VRBO.

Before jumping in, you'll need to take time to learn about the market, your expenses and any taxes you may need to pay. And before you list your property, you'll need to understand how to make it stand out with a good listing, including compelling photos and competitive pricing. Airbnb has a series of toolkits to help with this.

RELATED: Atlanta has Airbnb's most desired rental property in the world.

Rent it out to the area's growing TV and film industry.

When TV, film and commercial producers want to depict a home on screen, many times they'll rent the real thing, according to Money. It can be inconvenient for owners, however, since their homes may be taken over by a large crew and be completely rearranged.

On the other hand, homeowners often have fun with the experience while making some extra money. And while you're watching TV or a movie, you may be able to spot your home.

Host a foreign exchange student or faculty member.

Temporarily hosting a foreign exchange student or faculty member who's studying or teaching in this country can help you make some extra cash for anywhere from six weeks to six months at a time. You'll also be exposed to a different culture and language, and the experience could help you form a bond that lasts even when your guest returns home.

The Penny Hoarder suggests contacting student housing offices at local community colleges and universities, asking to be placed on their list of host families. After this, you'll have to apply, be interviewed, and allow your home to be toured. You'll also need to pass background and reference checks.

The 4-bedroom house sits on a corner lot with a concrete driveway that leads up to the two 2-car garages both having rear service doors. CONTRIBUTED PHOTOS BY KATHY TYLER

Rent out your driveway or storage space.

If you have extra space in your driveway, you may be able to make some money by letting others park there, according to Men's Health. This is especially true if you live near a commuter rail line or sports stadium, but you'll need to check to make sure you're not violating any local ordinances. Check out websites like JustPark to get started.

The Balance also suggests renting out any extra storage space you may have. From vehicles to personal items, your garage or home could help you make money through a site like StoreAtMyHouse.

Related

5 ways to get the most out of your health insurance plan

Published: Tuesday, November 14, 2017 @ 3:15 PM

Here are five ways to ensure you're getting the most out of your health insurance Choose your plan carefully Take advantage of preventative care benefits Work within your formulary Utilize HSAs and FSAs Watch out for surprise out-of-network charges

Health insurance has a large impact on your finances, so it pays to get the most out of your plan.

Understanding its ins and outs can be confusing, but it's worth your time to check on benefits you could be losing out on or mistakes that could cost you money.

Here are five ways to ensure you're getting the most out of your health insurance:

Choose your plan carefully.

When it's time to renew your health care coverage, consumer adviser Clark Howard recommends not just blindly signing up for your current plan, even if you've been happy with it.

Your plan – as well as other options you may be able to sign up for – may have changed. Take a close look at the co-pays, deductibles, in-network providers and other specifics to make sure you're making the best possible choice.

Take advantage of preventative care benefits.

Almost every plan, according to healthcare.gov, offers preventative care benefits that are free. You won't have to pay a co-pay or meet your deductible to get these services at no charge.

Services for adults include age-appropriate vaccinations and colorectal cancer screenings for patients over 50.

RELATED: 8 ways to get the cheapest car insurance possible

Work within your formulary.

Health care plans typically have a formulary, which is a list of medications that they're willing to pay part of or the entire cost of. It may include a list of preferred medications, for which it will pay the highest percentage of the cost.

It pays to be familiar with your formulary before you get an unpleasant surprise at the pharmacy, according to NerdWallet. Print out a copy of the document from your health insurance company's website, or call up an online copy at your doctor's office. Your doctor can work with you to make sure you get an effective medication that you can afford.

Utilize HSAs and FSAs.

If your health insurance plans allow you to put aside tax-free dollars in a Health Savings Account (HSA) or Flexible Spending Account (FSA), you should learn how they can help you. Consumer advisor Clark Howard's website, Clark.com, has a chart that explains the pros and cons of each.

An HSA is usually associated with high-deductible plans, and like an FSA, it helps you save money to pay for health care expenses. These can include everything from prescription eyeglasses to medication.

Watch out for surprise out-of-network charges.

Your insurance plan has a list of network providers, and when you can, you should stay in-network. That's easy enough if you're visiting a single doctor, but if you need to have surgery, things can get more complicated.

For pre-planned surgery, Consumer Reports recommends talking with your doctor's billing department to get a list of everyone who will provide your care, including radiologists and anesthesiologists. Call your health care company to see if they're in-network, and if not, ask your doctor if in-network providers can be used.

Related