[2973] in WWW Security List Archive
Re: Can you say "fraud"? (fwd)
daemon@ATHENA.MIT.EDU (Robert Bell)
Wed Sep 18 07:43:41 1996
From: Robert Bell <rabell@icdh16.dseg.ti.com>
To: auntyem@umich.edu (Mary Irene Wise)
Date: Tue, 17 Sep 96 15:39:34 CDT
Cc: www-security@ns2.rutgers.edu
In-Reply-To: <Pine.SOL.3.95.960917084104.21582B-100000@battlezone.rs.itd.umich.edu>; from "Mary Irene Wise" at Sep 17, 96 8:44 am
Errors-To: owner-www-security@ns2.rutgers.edu
You should checkout the page at Lexis-Nexis which discusses this.
I will tell you that at one time (for about 11 days) they did have
SSNs in the database. There was obviously enough back-lash that
they removed it then (June, July time frame). Note also that the
following URL was the only thing that I could find on the at
www.lexis-nexis.com about the P-trax database.
It also does not have mother's maiden name only your maiden name
(if you had one). Yes, your mother may be there, but that does
not tie you to your mother, unless they analyze addresses and
address history.
Checkout
http://www.lexis-nexis.com/lncc/about/ptrak.html
rabell ...
Robert Bell
rabell@ti.com
auntyem@umich.edu wrote
>
> This is probably a bit off-topic; if so I apologize.
>
> Can anybody comment on the item forwarded below my sig file? It claims
> there's a database w/ people's credit card no's etc on it and you have to
> give your name and social security number to get off of it. This strikes
> me as being a scam to get your ssn, but this went around at work and
> people are actually calling and giving it out. I know ssn's aren't really
> as secure as they're supposed to be, but still...
>
> So, does anybody know if this database is for real or if it's just a scam?
>
> TIA,
> Mary Wise
>
> --------------------------------- *** ------------------------------------
> Mary Wise |
> Computer Systems Specialist * auntyem@umich.edu
> LSA Information Technology | homepage not availabe at this time
> 3557 LSA Bldg 1382 *
> University of Michigan |
> (313) 647-6230 *
> |
> --------------------------------- *** ------------------------------------
>
>
> ---------- Forwarded message ----------
> >
> >
> > Your name, social security number, current address, previous addresses,
> > mother's maiden name, birth date and other personal information
> > are now available to anyone with a credit card through a new Lexis database
> > called P-Trax. As I am sure you are aware, this information
> > could be used to commit credit card fraud or otherwise allow someone else to
> > use your identity.
> >
> > You can have your name and information removed from this list by making a
> > telephone request. Call (800)543-6862, select option 4 and
> > then option 3 ("all other questions") and tell the representative answering
> > that you wish to remove your name from the P-trax database. You
> > may also send a fax to (513) 865-7360 or 865-1930. Include your full name and
> >ssn in the fax. You can also send physical mail to
> >
> > LEXIS-NEXIS
> > P.O. Box 933
> > Dayton, Ohio 45401-0933.
> >
> > Sending physical mail to confirm your name has been removed is always
> > a good idea.
> >
> > As word of the existence of this database has spread on the net, Lexis-Nexis
> > has been inundated with calls, and has set up a special set of
> > operators to handle the volume. In addition, Andrew Bleh (rhymes with
> > "Play") is a manager responsible for this product, and is the person
> > to whom complaints about the service could be directed. He can be reached at
> > the above 800 number. Ask for extension 3385. According to
> > Lexis, the manager responsible is Bill Fister at extension 1364.
> >
> > I called this morning and had my name removed. The representative will
> > need your name and social security number to remove you from the list.
> > I suggest that we inundate these people with requests to remove our
> > info from the list and forward this e-mail to everyone we know.
> >
> >
> >----- End Included Message -----
> >
> >
