<story><title>Detailed Financial Histories Exposed for Thousands</title><url>https://www.upguard.com/breaches/credit-crunch-national-credit-federation</url></story><parent_chain><item><author>vannevar</author><text>The problem isn&amp;#x27;t that our data has become public; it&amp;#x27;s that businesses accept data as identity. They mostly just mindlessly automated manual paperwork processes that were slow, but also less efficient to defraud. By only looking at costs, and not at risks, business has built our ecommerce infrastructure on sand. The notion of identity as it relates to business transactions needs to be reworked from the ground up.</text></item></parent_chain><comment><author>volgo</author><text>The solution here is not technical - we already know the technical solution. The solution is to introduce a cost to the risk.&lt;p&gt;Right now the &amp;quot;risk&amp;quot; has no cost - if you expose people&amp;#x27;s data there&amp;#x27;s not that much consequence besides bad PR. We should assign some dollar value to each person&amp;#x27;s identify leaked. That way, businesses can properly asses risk and reward when they start these types of projects&lt;p&gt;Overtime, I think businesses would rather avoid the liability of storing people&amp;#x27;s info in the first place</text></comment>
<story><title>Detailed Financial Histories Exposed for Thousands</title><url>https://www.upguard.com/breaches/credit-crunch-national-credit-federation</url></story><parent_chain><item><author>vannevar</author><text>The problem isn&amp;#x27;t that our data has become public; it&amp;#x27;s that businesses accept data as identity. They mostly just mindlessly automated manual paperwork processes that were slow, but also less efficient to defraud. By only looking at costs, and not at risks, business has built our ecommerce infrastructure on sand. The notion of identity as it relates to business transactions needs to be reworked from the ground up.</text></item></parent_chain><comment><author>joe_the_user</author><text>It would be a rather different world if people&amp;#x27;s private data couldn&amp;#x27;t be used against them in some fashion or other.&lt;p&gt;So the problem is both that money isn&amp;#x27;t locked by a more secure scheme than lots of data AND it is a problem that businesses are allowed&amp;#x2F;able to accumulate massive data on people wind-up being negligent with it.</text></comment>