In 2017, the credit report company Equifax suffered a data breach that
exposed the PII of more than 100 million Americans to attackers. The
exposed data included names, home addresses, phone numbers, dates of
birth, Social Security numbers, and driver's license numbers.
With access to only that information, which of these actions could not be
taken by an attacker?
Choose 1 answer:
A
An attacker could sell the Social Security numbers to another
attacker on the Internet.
B
An attacker could send an email to an affected person that
contained their PII and a threat to reveal them.
C
An attacker could steal the identity of one of the affected people.
D
An attacker could post the home addresses on a public website.

Question

Accepted Answer

***B*** ∻Key Concept∻ ⚹Sending threatening emails⚹ ∻Explanation∻ ⚹While an attacker could send emails, the specific action of sending threatening emails is not directly enabled by the PII data alone. The other actions (selling SSNs, stealing identities, and posting home addresses) are more directly facilitated by the exposed information.⚹◊What measures can be taken to enhance the security of OCR models to prevent unauthorized access to sensitive information like Social Security numbers?⍭ Generate me a similar question◊

Sia