page = krebs on security – in-depth security news and …
url = https://krebsonsecurity.com
The best part about this lax authentication process is that one can enter any email address to retrieve the PIN — it doesn’t need to be tied to an existing account at Experian. Also, when the PIN is retrieved, Experian doesn’t bother notifying any other email addresses already on file for that consumer.
Thomas said he’s furious that Experian only provides added account security for consumers who pay for monthly plans.