The missing “how” in media reports
The Associated Press reports that Tasheika Brown pleaded guilty in New Orleans to conspiracy to use stolen credit card numbers to buy cellular telephone equipment and airtime.
The story does not indicate how she got the stolen credit card numbers.
Unfortunately, we seem to be seeing an increasing number of media reports that refer to use of stolen PII without any indication of how the thief obtained the PII. That would seem somewhat important for us to know, especially since most notifications of breaches suggest that data have not been misused. Are these from unreported breaches or breaches we knew about?
Maybe if we waterboard the defendants, they’ll tell us where/how they got the PII.
Oh wait… that’s the administration that’s on its way out.
But it would help if U.S. attorneys or prosecutors who issue press releases addressed the issue of how criminals obtained the PII.