U.S. states probing security breach at Experian unit
By Jim Finkle and Karen Freifeld
(Reuters) - U.S. attorneys general have launched a multi-state investigation into a breach in which criminals gained access to a repository of some 200 million social security numbers through a unit of data provider Experian Plc.
"We are investigating," said Maura Possley, a spokeswoman for Illinois Attorney General Lisa Madigan. "It's part of a multistate investigation."
Jaclyn Falkowski, spokeswoman for Connecticut Attorney General George Jepsen, said that Connecticut is looking into the matter also.
Neither attorney general's office would say if other states were involved.
A spokesman for Experian declined comment on the probe, saying the company does not comment on such investigations as a matter of policy.
Vietnamese national Hieu Minh Ngo last month pleaded guilty in New Hampshire federal court to running an underground website that offered clients access to personal data of Americans including social security numbers, which could be used for identity theft and other types of financial fraud.
Federal authorities say that he obtained some of that through a U.S. firm known as Court Ventures, which provides customers with access to court records. It also offers them access to a database of social security numbers of some 200 million Americans through a data-share arrangement with another firm, known as U.S. Info Search.
Ngo obtained an account with Court Ventures sometime before March 2012, when Experian bought the data firm, by posing as a Singapore-based private investigator, according to court documents.
Prosecutors say that Ngo's customers used Court Ventures to make some 3.1 million queries of the U.S. Info Search database over an 18-month period ending in February 2013. Authorities have not said how many people's data was accessed through those queries, each of which could have potentially included multiple records or returned no data.
Officials with both Experian and U.S. Info Search say they have not been able to ascertain which records were accessed by Ngo's customers and are therefore unable to notify victims.
"We are actively pursuing the facts and we are working to help uncover what records may have been affected," said Experian spokesman Gerry Tschopp.
A spokesman for the U.S. Secret Service declined comment. The agency investigated Ngo using undercover agents and lured him from Vietnam to Guam where he was arrested.
He is now awaiting sentencing in New Hampshire federal court.