File Sharing Opens Users to Identity Theft

Wed Nov 7, 2007 5:09PM EST

See Comments (138)

Surprise! When you share files on your computer with the teeming masses on the Internet, you might be sharing more than just music and video files. Numerous peer-to-peer users are learning, the hard way, that file sharing is a quick and easy way to open yourself up to identity theft.

The story isn't at all new, but the Wall Street Journal is bringing it into better focus, with specific examples and an indication that this trend is exploding. One man pleaded guilty last week to stealing tax forms, credit reports, and loan applications from more than 50 people, through the file-sharing program LimeWire. He then used the info to open credit accounts in those people's names, the usual form that identity theft takes. In September, Citigroup lost more than 5,000 Social Security numbers because one of its employees was using LimeWire and shared the wrong network. Ditto for Pfizer in June, which lost 17,000 employee records the same way.

Finding this stuff online isn't hard. Search any P2P network for hot-button words like "taxes," "resume," or "loan," and you'll come across personal information in seconds. It's also easy to misconfigure your computer to inadvertently share this information. One or two clicks is normally all it takes to share the entire contents of your hard drive instead of a specific directory intended for sharing. And no, all the security software in the world won't help you if you make a mistake like this.

What should you do? For starters, don't use P2P at all if you don't know what you're getting into. As the WSJ notes, using a computer dedicated solely to file sharing is a potentially good solution; just keep anything you don't want shared off the PC altogether. (It also goes without saying that you shouldn't share copyrighted material, either, but that's a lecture for another day.) Some networks are safer than others; certain P2P apps, like BearShare, no longer allow DOC or PDF files to be shared at all. On the other hand, in my experience, LimeWire is the network most likely to turn up private information.

The full story also has information on corporate software that can help protect you by monitoring what you're sharing, called Tiversa. Check out the link below for more details.

LINK: The Hidden Risk of File-Sharing 

Comments on File Sharing Opens Users to Identity Theft

Post a Comment

Join in the discussion. Here you'll see the comments in the order they were posted.

  • 126 Posted by laylayjankins on Thu Sep 3, 2009 4:57PM EDT Report Abuse

    so, what is the answer? no limewire, no morpheus? how should you share files?

  • 127 Posted by xj23 on Thu Sep 3, 2009 10:53PM EDT Report Abuse

    I hit upon loads of info on soulseek after reading this! I'm gonna get me some credit cards! Woo!

  • 128 Posted by xj23 on Thu Sep 3, 2009 10:53PM EDT Report Abuse

    I hit upon loads of info on soulseek after reading this! I'm gonna get me some credit cards! Woo!

  • 129 Posted by xj23 on Thu Sep 3, 2009 10:53PM EDT Report Abuse

    Kidding! You people gotta be careful!

  • 130 Posted by alotti_music on Thu Sep 3, 2009 2:51PM EDT Report Abuse

    I thinks its really horrific, but its really not lime wire or any sharing programs fault for the leak... i blame the installer for not going into tools/options and setting there sharing folder as it says in the article. But it is a very bad mistake to make and then again why would you keep that information on a hard drive period, if you need to do something like type out a document with s.s.#'s or c.c. #'s do it , print it, and don't save the word file...how slow are we people?? File sharing can be cool at some point, lets say you want to get a home movie from a friend or relative and it's too big for email to send, also too big for the messenger lets says it 1.2GB ...file sharing on lime wire would be a good place for that.

  • 131 Posted by aquapoet1 on Thu Sep 3, 2009 2:57PM EDT Report Abuse

    Could the completely obvious RIAA spokespeople *cough* mg_roberts *cough* please leave the thread? You're not fooling anyone.

  • 132 Posted by atarikg on Thu Sep 3, 2009 2:58PM EDT Report Abuse

    Ohh.. Then we can never trust lime wire or other p2p programs anymore :(

  • 134 Posted by vonchie@rogers.com on Thu Sep 3, 2009 10:38PM EDT Report Abuse

    how do you take limewire off the computer and if you do is this enough?

  • 135 Posted by mg_roberts on Thu Sep 3, 2009 7:17PM EDT Report Abuse

    you're opening a specific port, with root privelages, granting access to your entire PC for everyone to see. P2P is the equivalent of running an FTP server on your PC with the home dir as the root dir, with anonymous access. anyone with a port scanner has full access to your PC. its not an exploit, it's how file sharing can happen without being prompted to verify each download. its not an exploit because that's how the software is designed to work. which is exactly why it makes you all such easy targets.

  • 137 Posted by screamingfreedom on Thu Sep 3, 2009 9:10PM EDT Report Abuse

    If you use a file sharing program you can do like me. I do not worry about my Identity. Since joining LifeLock my identity is secure and protected with a million dollar guaranteed. Rusty http://health-pictures.com/lifelock.htm

  • 138 Posted by screamingfreedom on Thu Sep 3, 2009 9:10PM EDT Report Abuse

    If you use a file sharing program you can do like me. I do not worry about my Identity. Since joining LifeLock my identity is secure and protected with a million dollar guaranteed. Rusty http://health-pictures.com/lifelock.htm

More Posts: First Prev 6 7 8 Next Last

Post a Comment


My Tech

Please enable your browser's cookies to activate the My Tech column.

Also on Yahoo! Tech

Computers Home Office Wi-Fi & Networking Phones & PDAs Cameras & Camcorders TV & Home Theater Portable Audio
 

Question and Answer content at Yahoo! Tech is written by Yahoo! users at Yahoo! Answers. Yahoo! does not evaluate or guarantee the accuracy of any Yahoo! Answers content. For more information, read the Full Disclaimer.

Opinions expressed by the Advisors are their own and do not necessarily reflect the views of Yahoo! Inc. Yahoo! receives no compensation from any manufacturer or distributor nor does it compensate any Advisor for the coverage of any product or service in any Advisor's content.