What should you do about the Equifax data breach?

It is still early in the investigation and new information continues to come to light, but it is clear that almost half of all Americans have been impacted by Equifax’s data breach. In light of this, it is hard not to rush impulsively to do something like click on on a link to sign up for credit monitoring. Scammers are already calling or emailing people to say they are with Equifax in order to trick people in disclosing personal information that can be used by other criminals to commit identity theft or infect their computers with malicious software. This is another risk related to the breach that consumers need to be aware of.

Though it will take further time for investigators to bring to light the complete ramifications, it is evident that the impact from this breach will last for decades.

No Easy Solutions

This is a long-term problem. Identity information was stolen in the breach, including names, addresses, and Social Security Numbers (SSNs), will be usable by hackers long after the breach has been forgotten. 10-years from now individuals who had access to the content stolen in the breach could use your SSN--unless you change it.

Change your SSN? If only that were easier. The government generally does not want you to change your SSN number. In order to accomplish this you have to show that you have been a victim and continue to be disadvantaged by using the old SSN.

Another potential solution is to place a security freeze and fraud alert on your accounts. A security freeze alerts potential creditors not to open new accounts. If you open a new account in the future you will need to unfreeze the account. This will take time and may delay new loans. This can be very difficult if you are applying for a mortgage loan. A fraud alert puts an alert on your account to take extra steps to verify your identity before issuing new credit.

Personally, I think Equifax should pay for credit monitoring for everyone for life. As mentioned, this information could be used in the distant future, long after their year of free monitoring is over. Write your congressional members and demand lifelong protection from a lifelong threat.

3 Things You Can Do

Sign in up for your own credit monitoring service. Optionally you can do a credit freeze or fraud alert on your account.
Don’t use Equifax’s free monitoring or their website.
Don’t listen to anyone who calls you about Equifax data breach. Also, watch out for emails, scammers will use fear to get you to click on a link to take you to a malicious website.

To freeze your credit or start a fraud alert call the three major credit reporting agencies.

Phone numbers:

Equifax — 1-800-349-9960
Experian — 1 888 397 3742
TransUnion — 1-888-909-8872

Update (from Chris Knight, 25 SEP 2017)

Don't know if this will make the blog but it took a few minute to find it: Within 30 days of agreeing to the terms of the enrollment, you can deliver a written notice to this address: Equifax Consumer Services LLC, Attn.: Arbitration Opt-Out P.O. Box 105496 Atlanta, GA 30348 It needs to include your name, address, and Equifax User ID, as well as “a clear statement that you do not wish to resolve disputes with Equifax through arbitration.”

More information and sources:

These websites will cover everything you need to know. You can start with the following: