Chad’s iMS Site

Attrition Security Rant: Useless Compensation for Data Loss Incidents

I agree 100% with this article.

 I already have, paid for with my own money, a service that watches my credit report from all three agencies, and notifies me with any change.  I read an article by Bruce Schneier a while ago and came away from that thinking that if someone steals my identity I will find out about it and notify the credit reporting bureaus that it is fraudulent information.  I think I could make a strong case of fraud against the agencies/credit card companies, if they continue to publish this fraudulent information with my credit information.  If the credit card company is so sure that it is myself who signed a credit card agreement with them, in my mind, the burden of proof lies with them.  They must prove, beyond a reasonable doubt, that it was in fact myself who signed up for and entered into the agreement with them.  Obviously the credit card company will never be able to do so, as I did not enter into this fraudulent contract.