Experian PLC said Monday that it is conducting an investigation into data illegally being sold on the internet, which may have been sourced from its subsidiary, Serasa S.A.
The FTSE 100 credit-reporting agency said that the data offered for sale includes photographs, social security information, vehicle registrations and social-media login details, which Serasa–a Brazilian credit research firm–doesn’t collect or hold. The data may have been sourced from Serasa’s non-sensitive marketing data, Experian said.
There is no evidence that positive or negative credit data has been illegally obtained and in spite of exhaustive investigations there is no evidence that Experian’s technology systems have been compromised, the company said.
Experian, which was responding to press speculation, said that protection of data was its priority and that it will provide further updates as appropriate.
Write to Joe Hoppe at [email protected]