[ APPLAUSE ] >>> GOOD MORNING, EVERYBODY.
WELCOME.
IM MEGYN KELLY. TODAY, HACKING.
TODAY, HACKING. DO YOU THINK YOURE IMMUNE TO
IT?
IT?
THINK AGAIN.
NO MATTER HOW GOOD YOUR PASSWORDS ARE AND YOUR SECURITY
STEPS ARE, YOUVE PROBABLY
ALREADY BEEN COMPROMISED.
WELL, NO MORE.
NBCS TOM COSTELLO IS HERE WITH
ACTION POINTS ON HOW TO PROTECT
YOURSELF AFTER HE RECENTLY TOOK
A LOOK AT JUST HOW VULNERABLE
ALL OF US ARE.
>>
>> Reporter: CHANCES ARE, YOU
STRUGGLE TO REMEMBER ALL OF YOUR
PASSWORDS FOR YOUR ONLINE
ACCOUNTS.
YOUR BANK, YOUR E-MAIL, AMAZON
AND NETFLIX AND KIDS
AFTER-SCHOOL CLUBS.
DESPITE THE WARNINGS, MOST OF US
USE JUST 12 PASSWORDS FOR 150 ACCOUNTS.12 PASSWORDS FOR 150
ACCOUNTS.
THAT MEANS WE REUSE THE SAME
PASSWORDS TEN TIMES.
THATS THE FIRST MISTAKE.
THE SECOND, OUR PASSWORDS ARE USUALLY BAD.OUR PASSWORDS ARE
USUALLY BAD.
>> YOUR PASSWORDS CRACKED. >> Reporter: YOU GOT IT ALREADY?
>> TODAYSHOW2018.
>> TODAYSHOW2018. >> Reporter: TO CRACK MY
PASSWORD PASSWORD, HE USED A HACKERS
TOOL ON THE INTERNET.
IF YOU CAN CRACK THAT THAT
QUICKLY, CRIMINALS CAN DO THAT.
>> EXACTLY.
>> Reporter: IT GOES FROM BAD TO WORSE.orter: IT GOES FROM BAD TO
WORSE. EXPERTS SAY MOST OF OUR
INFORMATION IS ALREADY FOR SALE
ON THE INTERNET.
OUR NAMES, ADDRESSES, D.O.B.s,
SOCIALS AND CREDIT CARD
INFORMATION, THANKS TO THE
MEGAHACKS OF THE PAST FIVE
YEARS.
YEARS.
HOW DO THE HACKERS DO IT?
>> WE HAVE A MOCK FINANCIAL SERVICES COMPANY. FINANCIAL
SERVICES COMPANY. >> Reporter: TO SHOW US, JAMES
CREATED HIS OWN ONLINE BANK.
>> WERE GOING TO USE AN ATTACK
TOOL HERE.
TOOL HERE.
WITH EXACTLY THE SAME CODE THAT
WAS USED BY THE ATTACKERS OF
EQUIFAX TO BREAK INTO THIS WEB
PAGE.
>> Reporter: THOSE TOOLS ALLOWED
HACKERS TO TAKE ADVANTAGE OF A
SECURITY FLAW AND BYPASS THE CUSTOMER LOG-IN PAGE.ASS THE
CUSTOMER LOG-IN PAGE. >> IT ONLY TOOK A FEW SECONDS.
>> Reporter: YOURE IN ALREADY.
>> IT WAS INCREDIBLY QUICK.
>> Reporter: THE COST OF CYBER
CRIME, $4 TRILLION AND CLIMBING
EVERY YEAR.
EVERY YEAR.
HOW DO YOU AND I AND EVERYDAY AMERICANS PROTECT OURSELVES?Y
AMERICANS PROTECT OURSELVES? >> THERES LOTS OF THINGS WE CAN
DO TO PROTECT OUR DATA.
ONE OF THE OBVIOUS ONES IS TRY
TO AVOID HANDING OVER AS MUCH
INFORMATION TO BUSINESSES.
ONLY HAND OVER DATA WHEN YOU
HAVE TO.
HAVE TO.
>> Reporter: IN FACT, LOOK WHAT WE FOUND ON THE INTERNET.K WHAT
WE FOUND ON THE INTERNET. >> WHAT WERE LOOKING AT HERE IS
A DATABASE OF E-MAILS AND
PASSWORDS THAT WERE LEAKED ON
THE WEB.
THE WEB.
>> Reporter: THATS A FORMER
ISRAELI CYBER INTELLIGENCE, NOW AT INTERCONTINENTAL BALLISTICOW
AT INTERCONTINENTAL BALLISTIC
MISSILE IBM SECURITY.
YOU HAVE TENS OF THOUSANDS OF
NAMES HERE.
>> AND THATS JUST ONE DATABASE.
>> Reporter: WE FOUND PASSWORDS
FOR FRIENDS AND NBC COLLEAGUES. EGGSFRIENDS AND NBC COLLEAGUES.
EGGS
EXPERTS SAY WE NEED TO TAKE OUR PASSWORDS TO THE NEXT LEVEL.OUR
PASSWORDS TO THE NEXT LEVEL. MY PASSWORD WAS WEAK.
I LEFT MY HEART IN SAN FRANCISCO
IN 2017.
IN 2017. BUT AUTOMATED COMPUTER PROGRAMS
MIGHT EVEN CRACK THAT.
THATS WHY SECURITY PROS SAY, WE
SHOULD ALL USE PASSWORD MANAGERS
OR VAULTS THAT KEEP OUR PASSWORD
PASSWORDS ENCRYPTED.
PASSWORDS ENCRYPTED. AND A CODE SENT VIA TEXT MESSAGE
THAT YOU MUST UNLOCK WITH BIO
METRICS.
METRICS.
>> WE HAVE TO ASSUME THERES A GOOD CHANCE THAT INFORMATION IS
OUT THERE, WHICH IS WHY WE
CHANGE OUR PASSWORDS AND UPDATE
OUR ACCOUNTS.
OUR ACCOUNTS. >> IM SCARED.
TOM, THANK YOU FOR THAT.
WERE ALSO JOINED BY CALLEB
BARLOW.
BARLOW.
THE QUESTION IS CAN WE DO ANYTHING TO KEEP OUR ACCOUNTS,
OUR PERSONAL INFORMATION, OUT OF
THE HANDS OF HACKERS AND THE BAD
GUYS?
GUYS?
IS THERE?
>> THIS IS ONE OF THE BIG CHALLENGES WE ALL FACE.IG
CHALLENGES WE ALL FACE. IF WE LOOK AT THIS, THIS IS ONE
OF THE BIGGEST ISSUE AFFECTING
OUR TIMES AND OUR SOCIETY.
ILL TELL YOU WHAT IM FOCUSED
ON.
ON.
THIS ISNT JUST ABOUT PROTECTING OUR OWN DATE TO.BOUT PROTECTING
OUR OWN DATE TO. IT
IT
DATA. ITS ABOUT PROTECTING THE DATA
OF OUR FRIENDS, OUR COLLEAGUES
THAT WE WORK WITH.
IF YOUR ACCOUNT IS COMPROMISE,
THAT IS THE LAUNCHING PAD FOR AN
ATTACKER TO GO AFTER EVERYONE
AROUND YOU.
AROUND YOU.
>> WEVE SEEN THAT. HOW MANY TIMES HAVE YOU GOTTEN A
NOTIFICATION FROM A FRIEND THAT
SAID, IVE BEEN HACKED.
MAYBE YOU OPENED UP SOMETHING
FROM THEM.
FROM THEM.
YOURE LIKE, GREAT. THANKS A LOT, ELIZABETH.
YOU RAN AN EXPERIMENTAL TEST
WITH THIS AUDIENCE.
>> WE DID.
WE GOT 22 VOLUNTEERS FROM THE
AUDIENCE.
AUDIENCE. ACTUALLY, LET ME READ OFF SOME
NAMES, IF THEY COULD STAND UP.
>> UH-OH.
>> UH-OH. >> KATHLEEN, NANCY, MARGARET,
CHRISTINE, GWEN, AND PATRICIA.
WERE ALL OF YOU AWARE THAT OVER
THE COURSE OF THE LAST TWO
YEARS, YOUR PERSONAL INFORMATION
HAS BEEN PART OF THE DATA
BREACH?
BREACH?
NO. SEVERAL OF YOU WERE INVOLVED IN
MULTIPLE BREACHES.
MULTIPLE BREACHES. FOR EXAMPLE, NANCY AND
CHRISTINE, YOU WERE BOTH PART OF
TWO TO THREE BREACHES EACH.
DOES THAT SURPRISE YOU AT ALL?
>> YES, IT DOES.
>> NOT REALLY.
>> NOW, DO YOU USE THAT E-MAIL
ADDRESS YOU GAVE US FOR BUYING A
LOT OF THINGS AND MAKING
PURCHASES?
PURCHASES?
>> YES.
>> EXACTLY.
SO, WHERE YOU BOTH FELL VICTIM
WAS A BREACH THAT ACTUALLY WAS
ASSOCIATED WITH A MARKETING COMPANY THAT HAS A LOT OF YOUR
INFORMATION AND USES THAT TO
MARKET TO YOU.
THEY MADE MISTAKES AND BAD GUYS
CAN ACCESS YOUR INFORMATION.
>> HOW CAN THEY GET INTO THE
ACCOUNT?
ACCOUNT?
>> THEY DONT GET INTO THEIR
ACCOUNTS.
THEY GOT ACCESS TO THEIR INFORMATION.ESS TO THEIR
INFORMATION.
FOR EXAMPLE, THEY MIGHT HAVE NOT ONLY THEIR E-MAIL ADDRESS, BUTOT
ONLY THEIR E-MAIL ADDRESS, BUT THEIR LOCATION OF WHERE THEY
LIVE.
LIVE.
COULD DEPENDING ON THE BREACH,
BE PRIVATE INFORMATION LIKE A
SOCIAL SECURITY NUMBER OR DATE
OF BIRTH.
LAST YEAR ALONE, ONE BREACH, ONE BREACH, HALF OF ALL AMERICANSONE
BREACH, HALF OF ALL AMERICANS LOST THEIR SOCIAL SECURITY
NUMBER.
NUMBER.
>> OH, MY GOODNESS. >> MEGYN, I HATE TO TELL YOU
THIS, WE ALSO HAVE YOUR
INFORMATION.
INFORMATION.
YOUR INFORMATION WAS ALSO OUT
THERE.
YOUR PRIVATE, PERSONAL E-MAIL
WAS OUT THERE.
WERE NOT GOING TO SHARE IT. BUT HERES THE PROBLEM --IT.
BUT HERES THE PROBLEM -- >> WERE GOING TO TALK ABOUT IT
LATER.
LATER.
>> HERES THE PROBLEM. THE PROBLEM IS, IF HACKERS HAVE
YOUR PERSONAL E-MAIL, AND YOURE
A PUBLIC FIGURE, AS AM I, THEY
CAN START DOING RESEARCH ON YOU.
AND THEY CAN TARGET YOU WITH
E-MAILS, FISHING E-MAILS, TRYING
TO GET YOU TO CLICK ON A LINK
AND GET YOU TO EXPOSE YOURSELF.
AND IF THEY CANT GET YOU, THEY
WILL START TARGETING YOUR
FRIENDS AND YOUR KIDS.
AND THEY CAN BUILD INFORMATION,
A DATABASE ABOUT YOU OR ANYBODY
TO START THAT.
>> ONCE YOU CLICK ON THE LINK,
YOURE DEAD.
YOURE DEAD.
THEYRE IN. >> THEYRE INSIDE YOUR COMPUTER.
>> LETS GO THROUGH WITH THE
THINGS WE SHOULD AND SHOULD NOT
DO.
DO.
WHATS NUMBER ONE?
>> I THINK ONE OF THE THINGS THAT WE SHOULD DO IS REMEMBER
THAT, YOU KNOW, GREAT TECHNOLOGY
COMES WITH GREAT RESPONSIBILITY.
AND PART OF THAT RESPONSIBILITY,
NOT ONLY KEEP YOUR PASSWORD
CHANGED AND UP TO DATE, BUT YOU
CAN GO OUT TO WEBSITES AND
CHECK, MAYBE ONCE A MONTH, TO
SEE IF YOUVE ACTUALLY BEEN WHAT
WE CALLED POWNED.
YOUVE BEEN PART OF A DATA
BREACH.
BREACH.
ONE OF THE SITES WE USE IS IVEBEENPOWNED.COM.E USE IS
IVEBEENPOWNED.COM.
>> THATS THE TECHNICAL DATA FOR IT.THATS THE TECHNICAL DATA FOR
IT.
>> SEE IF YOUR E-MAIL IS IN IT.
NO DANGER OF PUTTING YOUR E-MAIL
IN THERE?
>> WERE GOING TO POST UP THE
WEBSITES TO GO CHECK.
>> WHAT ELSE?
>> DONT USE THE SAME E-MAIL ADDRESS THAT YOURE DOING FOR
YOUR SHOPPING OR YOUR NETFLIX OR
YOUR FACEBOOK.
YOUR FACEBOOK. DONT USE THAT E-MAIL ADDRESS
FOR YOUR BANKING ACTIVITIES.
YOU SHOULD HAVE A SEPARATE,
SACRED E-MAIL ADDRESS ASSIGNED
ONLY FOR BANKING AND INVESTMENTS
AND THAT KIND OF THING.
>> I DID NOT KNOW THAT.
>> YOU WANT TO CREATE SISILOS.
AND THE MOST SENSITIVE
INFORMATION, SHOULD BE ON AN
E-MAIL THAT YOU DONT SHARE WITH
ANYBODY ELSE.
ANYBODY ELSE. >> THATS EASY.
>> YOU KNOW THE PERSONALITY
TESTS YOU GET ON FACEBOOK.
>> WHICH "GOLDEN GIRL" ARE YOU?
>> WHICH GOLDEN GIRL ARE YOU,
MEGYN?
MEGYN?
>> IM SOFIA.
>> HOW ABOUT YOU, TOM? I THINK ONE OF THE THINGS YOU
REALIZE, AT TIMES, THINGS LIKE
THAT ARE ASKING PERSONAL
INFORMATION THAT COULD BE USED
BY AN ATTACKER TO MOUNT AN
ATTACK.
ATTACK.
WHERE DID YOU GROW UP?
WHAT HIGH SCHOOL DID YOU GO TO? ALL OF THOSE ARE QUESTIONS THAT
ARE USED WHEN YOU GO TO RESET
YOUR PASSWORD.
YOUR PASSWORD.
>> WHICH "FRIENDS" CHARACTER ARE YOU, IS THAT PUT UP BY BAD GUYS?
>> MORE OFTEN THAN NOT, THOSE
THINGS ARE PUT UP BY MARKETING
COMPANIES LOOKING TO MARKET TO
YOU.
YOU.
SOMETIMES IT CAN BE PUT UP BY A BAD GUY.S IT CAN BE PUT UP BY A
BAD GUY.
>> DONT DO IT. GO TO YOUR PSYCHIATRIST IF YOU
WANT TO KNOW WHAT KIND OF
PERSONAL YOU ARE.
>> HERES A DO AND A DONT.
IF YOU GET THE QUESTIONS WHEN
YOURE CREATING YOUR ONLINE
SECURITY PROFILE.
SECURITY PROFILE.
WHAT STREET DID YOU GROW UP ON?
LIE.
DONT TELL THE REAL REASONS. IF YOU PUT OUT THERE, MY STREET
THAT I GREW UP ON IS MAIN
STREET, USA.
STREET, USA. WELL, THEY CAN START USING THAT
INFORMATION, BUILDING A
DATABASE.
DATABASE.
IF THEY FIND INFORMATION, ON THE SOCIAL MEDIA SITES, LIKE, ON THE
SOCIAL MEDIA SITES, LIKE FACEBOOK OR YOUR FRIENDS, THEY
CAN SAY, MEGYN GREW UP ON MAIN
STREET.
STREET.
AND MEGYNS FAVORITE COLOR IS BLUE AND HER FIRST DOGS NAME IS
ROVER.
ROVER.
>> BEFORE THEY KNOW IT, THEYRE
IN ALL OF YOUR ACCOUNTS.
THEY CAN GET A CREDIT CARD UNDER
YOUR NAME.
>> USE YOUR COUSINS STREET THAT SHE GREW UP ON.SINS STREET THAT
SHE GREW UP ON. >> THATS GOOD.
>> USE YOUR BEST FRIENDS DOGS
NAME.
NAME.
THE TROUBLE IS, YOU IS TO REMEMBER THAT STUFF.IS TO
REMEMBER THAT STUFF. >> SO, WHAT IS THIS VAULT YOURE
TALKING ABOUT?
TALKING ABOUT?
MOST OF US JUST PUT OUR PASSWORDS ON SOME PLACE IN THE
iPHONE.
iPHONE.
I DONT WANT TO BE SPECIFIC. >> WHAT IS THE VAULT?CIFIC.
>> WHAT IS THE VAULT? >> THE VAULT IS A TOOL YOU CAN
BUY, WHERE IT ALLOWS YOU TO
STORE A BUNCH OF PASSWORDS THAT
YOU CANT REMEMBER THE NAMES TO.
LENGTH MATTERS, RIGHT?
>> AN APP?
>> IT STORES SS ALL OF YOUR POS
PASSWORDS.
PASSWORDS.
>> THAT IS SO MUCH EASIER.
>> AND IT ENCRYPTS PASSWORDS AND CREATES LONG, COMPLICATEDRDS AND
CREATES LONG, COMPLICATED PASSWORDS, ALL OF THEM
ENCRYPTED, SO YOURE NOT USING
12 FOR A BUNCH OF DIFFERENT
SITES.