This odd domain name was a REALLY stupid thing. Ironic, even - that with the response to a security incident like this, they would address it specifically with all the workings of a phishing scam. I'm [pretty] sure they didn't mean to do that, but it was so badly done, a colleague and I looked at it, thinking it was some kind of joke or phishing awareness trick. I mean, you click on a link from a news article for an Equifax security breach and you get brought to a page that ANYONE of us could have registered and it asks you for your name and almost ALL of your social security number? I couldn't believe it. I still can't.

Mike