[masraum]

Originally Posted by GH85Carrera

I received a letter from PBI or Pension Benefit Information. I had never heard of them, and I did not even know who they were.

Anyway the letter states that on May 31st, they were hacked with the MOVEit exploit. Evidently my name and SSI were copied.

So a company that I do not, and can't even deal with has crappy security, and my name and SSI gets hacked by thieves.

They are paying for a year of credit monitoring with Kroll Monitoring Services. Again, never heard of them. Oh, and they want my name address and SSI to sign up. So another possible hack can happen?

From what I can see online, Kroll is a real company and not some scam, and so is PBI.

I think that part is the key. Over the years, I've gotten emails from every bank you can think of and many that you haven't about "my" account, except that I don't have an account with them. It's a shotgun approach that they hope will trick the not terribly savvy folks.

Send 10 million email addresses an email about a free service. Some folks that are not that smart, and probably a little greedy ("I don't know what this is about, and I don't have an account, but I'd love to get something for free") will click the link and enter all of their info in the bogus website so that the folks behind the website and emails will have a ton of their info including name, address, phone number SSN, whatever they pick as a password (which is probably one that they use on every site) and probably a credit card.