Your questions answered on the Equifax data breach

Kathryn Lee
U.S. PIRG
Published in
3 min readSep 12, 2017

The credit bureau Equifax disclosed a breach of up to 143 million Social Security numbers, birth dates and other personal data.

The types of information taken from the massive credit bureau, particularly Social Security numbers and dates of birth, are the keys to new account identity theft. This means identity thieves could open fraudulent credit accounts and rack up tons of debt in your name.

This is a big deal. To make matters worse, there’s a lot of confusion over what to do now. We wanted to make sure we got this information out so you can make the best decision possible.

Here are frequent questions we’re getting:

Q: Should I accept Equifax’s package?

A: Hold off for now.

To take advantage of Equifax’s package, you have to agree to be bound by its online agreement. Equifax’s original Package agreement included an arbitration clause, which Equifax could have tried to use to bar victims of the data breach from joining class action lawsuits. After public outcry, Equifax removed the arbitration clause from its agreement.

However, Equifax has a separate Terms of Use agreement on its website which also includes an arbitration clause. There remains some concern that Equifax could try to use this clause to bind victims who agree to be bound by the Package agreement.

Until Equifax get rid of the arbitration clause from all its sites and contracts, consumers should hold off on accepting Equifax’s package.

Q: How do I know if I’ve been hacked?

A: You should request free credit reports at each of the “Big Three” credit bureaus annually under federal law.

Equifax has a website where you can use a tool to see whether your information has been hacked. We have seen numerous press reports that it gives different results at different times. Presume instead that it is more likely than not that your information has been compromised.

With your credit report, you can spot any unauthorized activity. By law, you can request a copy of your credit report from each credit bureau every year. If you request one report every three to four months then you have your own version of free credit monitoring throughout the year. The official website authorized by the government for requesting these free reports is annualcreditreport.com.

Q: What can I do to make sure my identity is safe going forward?

A: We recommend consumers placing credit or security freezes on their credit reports with all three credit bureaus.

Social Security numbers and birthdates, which were stolen in this breach, can be used to open credit accounts in your name and rack up tons of debt. Credit monitoring only helps you detect this kind of activity after it has already happened. The only way to actually prevent this activity is with credit freezes at all three bureaus. More info and steps for doing this are available here.

Although not the largest breach in history, the Equifax breach provides thieves with a treasure trove of information that can be used against you.

We’ll keep you posted as there are other steps you can take to call on Equifax or Congress to do more to remedy this situation, and prevent similar problems in the future.

If you found this piece interesting or useful, please recommend it, by clicking the clap icon below, so that others can find it on this platform.

--

--