Equifax data breach

[kghjr]

Consumer Reports highly recommends we put security freezes on our credit bureau accounts. There are four. It took me less than 15 minutes to do all four online.

"If you haven't already, the first, best, and fastest way to protect yourself from the Equifax data breach is to place a security freeze on your credit files at the big three credit reporting bureaus." Jeff Blyskal

Here's the article with the four links

https://www.consumerreports.org/equifax/how-to-lock-down-your-money-after-the-equifax-breach/

[A930Rocket]

I tried to freeze my account the big three. Could only freeze it at Equifax. The other two said I had to mail it in.

[ossiblue]

Originally Posted by A930Rocket

I tried to freeze my account the big three. Could only freeze it at Equifax. The other two said I had to mail it in.

I successfully did this two days ago, but I believe the volume of those trying to freeze their reports has increased to the point that the on-line and phone method is bogged down. You might try again, early in the morning, using either the web or phone method.

Though I had the freezes in place, I tried yesterday to get my credit reports from all three. I was able to only get one from Experian as the other two were unable to process on-line requests and suggested I use mail. Likely the overload, once again.

Curiously, when I successfully froze my reports, from here in California, it was about 9-10am, local time. Others on this forum in eastern locales were unable to complete on-line requests as it was 2-3 hours later in their local areas. Makes me think the companies have regional offices that process information, in this case.

[Porsche-O-Phile]

I think you're looking for a "fraud alert" (specifically an extended one). This is from FTC:

What’s the difference between a credit freeze and a fraud alert?
A credit freeze locks down your credit. A fraud alert allows creditors to get a copy of your credit report as long as they take steps to verify your identity. For example, if you provide a telephone number, the business must call you to verify whether you are the person making the credit request. Fraud alerts may be effective at stopping someone from opening new credit accounts in your name, but they may not prevent the misuse of your existing accounts. You still need to monitor all bank, credit card and insurance statements for fraudulent transactions.

Three types of fraud alerts are available:

Initial Fraud Alert. If you're concerned about identity theft, but haven't yet become a victim, this fraud alert will protect your credit from unverified access for at least 90 days. You may want to place a fraud alert on your file if your wallet, Social Security card, or other personal, financial or account information are lost or stolen.
Extended Fraud Alert. For victims of identity theft, an extended fraud alert will protect your credit for seven years.
Active Duty Military Alert. For those in the military who want to protect their credit while deployed, this fraud alert lasts for one year.
To place a fraud alert on your credit reports, contact one of the nationwide credit reporting companies. A fraud alert is free. You must provide proof of your identity. The company you call must tell the other credit reporting companies; they, in turn, will place an alert on their versions of your report.

https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

[RANDY P]

I've been tellin U boyz,

it's no longer about data security- 1/2 the country has been truly compromised.

It's about fraud detection now. There's nothing to protect anymore, SSN's are now more widely known than GPA's.

rjp

[ossiblue]

Originally Posted by Porsche-O-Phile

I think you're looking for a "fraud alert" (specifically an extended one). This is from FTC:



https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

Don't know if you were responding to my post immediately above yours, but, if so, a fraud alert is another tool, but not as effective as a security freeze. It may be a good idea to have both however, a fraud alert is very porous. A fraud alert only notifies the credit agencies to verify the ID of anyone attempting to manipulate your credit. That verification process may or may not work if the thief has changed contact information using your stolen information. Also, it relies on the effectiveness of the credit agency, something that is completely questionable now. Finally, an alert is only good for 90 days and and extended alert can only be applied if you have already been a victim of ID theft and have a police report or some other record of the incident. I suppose you can renew a fraud alert every 90 days, but that becomes burdensome, especially when a freeze is continuous until you actively release it.

Bottom line, it's probably good to have both, in addition to you own personal monitoring of your credit reports. Our personal ID security has been put at risk by forces we had no control over nor even with our consent. We have to take our own steps to protect our ID, as far as the system allows.

[Porsche-O-Phile]

Yea I think both would be prudent although in response to the point above if you do a fraud alert it's supposed to be automatic to all bureaus.

This isn't a bad thing if it decreases America's over-reliance on banks and credit too. The whole system is so ridiculous and so badly managed / regulated maybe there will be an upside to this. We could certainly do with people "living within their means" more anyway.

[ossiblue]

Originally Posted by Porsche-O-Phile

Yea I think both would be prudent although in response to the point above if you do a fraud alert it's supposed to be automatic to all bureaus.

This isn't a bad thing if it decreases America's over-reliance on banks and credit too. The whole system is so ridiculous and so badly managed / regulated maybe there will be an upside to this. We could certainly do with people "living within their means" more anyway.

Yes, a fraud alert automatically goes to all three.

It's certainly a good thing to reduce reliance on banks and credit, but the personal security breach reaches way beyond that. It's your personal data that is the issue, not necessarily your credit rating. Your personal data is there if you've ever had any credit obligation of any kind, and once it's there, it is used by institutions other than credit bureaus and banks--landlords, employers, utilities, for instance. How does one buy a home without a bank loan? Millions of us have always lived within our means and now are at risk. It has little to do with use of credit and reliance on banks.

[Geary]

I've had security freeze on the bigger 3 for over 10 years. This is the first time I'd heard about the 4th one, Innovis .. I'll mail them a request tomorrow.

[kghjr]

I've had Lifelock, whether it's worthless or not, since 2007 when the contents of my desk drawers were stolen in a home burglary. They had all my bank account numbers, investment account numbers, SSN, DL info, medical records, passwords, the works. Apparently, I supposed years later, they threw it all in the trash.

I follow identity theft prevention protocols as normal life now. I was able to do all four freezes online, within 15 minutes.

[cstreit]

Mines been frozen since someone filed a tax-return in my name...

...note that if you sign up for Equifax fraud protection you are also waiving your right to sue/class action, etc...

[Crowbob]

Originally Posted by cstreit

Mines been frozen since someone filed a tax-return in my name...

...note that if you sign up for Equifax fraud protection you are also waiving your right to sue/class action, etc...

My understanding is that the forfeiture of a settlement will not apply for procuring fraud proection as a result of this breach.