John Gear Law Office & Salem Consumer Law    503-569-7777
  • Welcome
  • Services Offered
  • Finding My Office
  • Law for Real People blog
  • Useful links

What to do about the Equifax Hack that Puts You at High Risk of ID Theft

9/20/2017

0 Comments

 
Picture
Where can you find unbiased, objective advice about ways to minimize the damage and risk from Equifax's outrageous computer security negligence and its lengthy cover-up afterwards?

Equifax's gross misconduct means that nearly every adult with a credit history is at risk of identity theft. In this free article, the National Consumer Law Center offers key advice for consumers, with specific steps that can be taken to minimize the risks-freezes, thaws, fraud alerts, credit monitoring, and more.



Key Steps to Minimize Risk After Equifax Data Breach

by National Consumer Law Center
September 18, 2017


Determining Whether the Client Has Been Affected

It is very likely that any client with a credit history is one of the 143 million adult Americans whose personal information was exposed in a data breach at Equifax, one of the three major nationwide credit reporting agencies. Equifax has stated that from mid-May through July hackers accessed people’s names, Social Security numbers, birth dates, addresses, and in some instances, driver’s license numbers.

While it is safest to assume that a client has been affected, one way to try to verify this is to go to the Equifax site, www.equifaxsecurity2017.com to see what Equifax says. The site is far from a model of clarity and there are media reports indicating the site is not working properly and questioning its reliability. To use the Equifax site, click on “Potential Impact” at the top of the page and enter the last six numbers of a Social Security number and last name. For most people, the site will respond: “Based on the information provided, we believe that your personal information may have been impacted by this incident.”
The site also mentions enrolling in “TrustedID Premier”—the client need not enroll. TrustedID Premier is a credit monitoring service that is only initially free and that does NOT fully protect a consumer. The site also initially had an arbitration clause, which has since been removed, but there has been significant confusion over the issue. The client can just exit the site.
Risks Implicit in the Data Breach

The hacker’s access to this personal information raises various risks for clients. Perhaps the greatest risk is that an identity thief will take the consumer’s Social Security number, name, address, and birth date, and use this data to open credit accounts in the consumer’s name, sometimes called “new account” identity theft. While a consumer ultimately is not liable for the charges on such unauthorized accounts, resolution of the matter will not be pleasant.
The unpaid credit charges can damage the consumer’s credit report and it may take significant effort to clean that up. The consumer could be subject to debt collection calls and even debt collection lawsuits. If the consumer defaults on such a lawsuit, wages and bank accounts can be garnished. The best measure to prevent new account identity theft is a credit freeze, discussed below.
Another risk is that unauthorized persons might gain access to certain of a consumer’s existing accounts using the hacked information, and direct the business to take certain actions. As a result, consumers should pay careful attention to their existing accounts—reviewing statements, noticing if monthly statements do not arrive, and accessing their accounts online to watch for fraudulent transactions.
Another risk is an identity thief with the consumer’s Social Security information may file a tax return in the name of the consumer, seeking a large refund, and directing that refund to a prepaid card held by the thief. The client filing the legitimate tax return as soon as possible may preempt a scam filing that is submitted later to the IRS. Clients in Florida, Georgia, and the District of Columbia, or who have been previously approved by the IRS, can obtained an Identity Protection PIN from the IRS.
A Credit Freeze Is Recommended to Prevent Identity Theft

The strongest measure a client can take to prevent an identity thief from opening a credit account in the client’s name is to request a credit freeze A freeze prevents creditors from accessing the client’s reporting file or credit score. Creditors that rely on a credit report or score in granting credit are likely to refuse to offer credit if they cannot obtain a report or score. However, a credit freeze does not prevent a thief from making charges on existing accounts. As discussed above, the client should pay close attention to those.
Because a creditor could seek a report from any of the three major national reporting agencies—Equifax, Trans Union, and Experian—the consumer must place a credit freeze with each of the three reporting agencies. Click on the below links to file online or call the below numbers to place the freeze:

  • • Equifax—1-800-349-9960 or 1-800-685-1111.
  • • Experian—1-888-397-3742
  • • TransUnion—1-888-909-8872 or 1-800-680-7289
Fees vary from $5 to $10 for each reporting agency, based on the client’s state, but Equifax states it will waive such fees for now.
There have been reports of consumers having difficulty obtaining freezes due to technical issues with the credit reporting agency websites. Unfortunately, the only advice is for clients to keep trying.
Very Important:

The reporting agency will send a confirmation letter with a unique PIN or password. The client will need to retain the PIN or password in a safe place, because the client will need the PIN to lift the freeze temporarily or permanently.

A freeze does not affect a client’s credit record or credit score, prevent the client from obtaining a free annual or other credit report, or prevent existing creditors or debt collectors from seeing the client’s file. The freeze though will require the client to take an extra step before the client applies for new credit, a new job, an apartment rental, or new insurance.
This extra step is called “thawing” the freeze, either for a specific time or for a specific creditor or other business. Thawing or lifting the freeze usually costs $5 or $10 for each agency. The client will have to thaw the freeze for all three agencies unless the client knows which agency the creditor, employer, landlord or insurer will contact.
If the client takes no steps, the freeze can last forever (seven years in a few states). This may be a good thing, because there is no time limit for when an identity thief will use the client’s Social Security number obtained from Equifax.
A Fraud Alert Is a Lesser Alternative

A fraud alert works somewhat like a freeze, but instead of freezing the account, the fraud alert requires a creditor obtaining the consumer’s credit report or score to take steps to verify the consumer’s identity, such as by calling the consumer. Fraud alerts rely on the creditor’s vigilance, whereas freezes automatically deny access to the creditor, which is why freezes are considered stronger. Fraud alerts also apply not just to applications for new credit, but to requests to issue an additional credit card or increase the credit limit on an existing account.
Three types of fraud alerts are available. The below links provide more information on fraud alerts for each, including links to online forms and phone numbers to apply for fraud alerts with each of the three nationwide reporting agencies:
  • • Initial Fraud Alert that works only for 90 days and is renewable.
  • • Extended Fraud Alert that works for seven years and requires the client to first file an identity theft report.
  • • Active Duty Military Alert applies to those in the military and lasts for one year.
All three types of fraud alerts are free and the client only need contact one of the three nationwide credit reporting companies. That company is required to refer the fraud alert to the other two credit reporting companies.
Credit Monitoring Is Not the Best Option

Clients can purchase credit monitoring services, but these are costly (in response to the data breach, Equifax until November 21 is offering a monitoring service free for the first year). Moreover, credit monitoring alone is not as effective as a freeze. Credit monitoring is supposed to identify new accounts opened in the client’s name or attempts to open an account, but it only does so after the fact and it does not always work successfully. In addition, like freezes and fraud alerts, creditor monitoring does not help to spot fraudulent charges on existing accounts—the client should be advised to carefully review statements on these existing accounts.

Instead of paying for credit monitoring, clients can do this themselves simply by obtaining for free and then reviewing their credit reports. The client has a right at annualcreditreport.com to obtain a free annual report from each of the three national reporting agencies. Stagger the requests every four months from a different agency, and the client can have a continual snapshot of the client’s credit file. In some states and in some circumstances, additional free reports are available, allowing for even more frequent self-monitoring. Requesting a fraud alert also entitles the client to another free report.

Even if an attorney has the client’s authorization to pull a credit report for the client, the client should always be present when applying for the report. The website for security reasons will ask personal information that the attorney is unlikely to know.
Some credit monitoring or identity theft prevention products also allow a consumer to “lock” their credit report. While a “lock” may share some features with a freeze, state laws provide consumers with the right to freeze their credit files, and in some states a violation of that state law is privately enforceable. It is unclear the legal status of a “lock” or even how the “lock” works.
Enter your Email:
Preview | Powered by FeedBlitz
0 Comments

Your comment will be posted after it is approved.


Leave a Reply.

    RSS Feed

    Author

    John Gear Law Office -
    Since 2010, a values-based Oregon law practice serving Oregon consumers, elders, employees, and nonprofits.

    Categories

    All
    Advertising
    All
    Arbitration
    Autofraud
    Bankruptcy
    Borrowing
    Class Actions
    Consumer Law
    Consumer Protection
    Consumer Protection Class Actions
    Credit
    Credit Reports
    Debt
    Debt Collection
    Elder Abuse
    Elders
    Employment
    End Of Life
    Fairness
    Fdcpa
    Foreclosures
    Fundraising
    Funeral
    Games Car Dealers Play
    Garnishments
    Great Stuff
    Health Care/Insurance
    Identity Theft
    I (heart) Liz Warren
    Insurance
    Lawyer Referral Service
    Legal Resources
    Lemon Law
    Life Planning
    Long-term Care Facilities
    Media
    Military
    Military Assistance Panel
    Modifications
    Mortgages
    N.A.O.
    Nonprofits
    Oregonadminrules
    OregonLaws.org
    Plain English
    Preparing For Departure
    Privacy
    Pro Bono
    Regulation
    Resources
    Right To Repair
    Safety
    Scam
    Scams
    Strategic Planning
    Student Loans
    Tort Reform
    Training
    Used Cars
    Veterans
    Wage Garnishment
    Wage Theft
    Warnings
    Warranties
    Watchdogs
    Workplace

    Archives

    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    April 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    June 2020
    April 2020
    March 2020
    February 2020
    December 2019
    November 2019
    October 2019
    September 2019
    August 2019
    July 2019
    June 2019
    May 2019
    April 2019
    March 2019
    February 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    January 2018
    December 2017
    November 2017
    October 2017
    September 2017
    August 2017
    July 2017
    June 2017
    May 2017
    April 2017
    March 2017
    February 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015
    February 2015
    December 2014
    November 2014
    October 2014
    September 2014
    August 2014
    July 2014
    June 2014
    May 2014
    April 2014
    March 2014
    February 2014
    January 2014
    December 2013
    November 2013
    October 2013
    September 2013
    August 2013
    July 2013
    June 2013
    May 2013
    April 2013
    March 2013
    February 2013
    January 2013
    December 2012
    November 2012
    October 2012
    September 2012
    August 2012
    July 2012
    June 2012
    May 2012
    April 2012
    March 2012
    February 2012
    January 2012
    December 2011
    November 2011
    October 2011
    September 2011
    August 2011
    July 2011
    June 2011
    May 2011
    April 2011
    March 2011
    February 2011
    January 2011

    RSS Feed

Picture

LAWYERLY FINE PRINT:

John Gear Law Office LLC and Salem Consumer Law.  John Gear Law Office is in Suite 208B of the Security Building in downtown Salem at 161 High St. SE, across from the Elsinore Theater, a half-block south of Marion County Courthouse, just south of State Street. There is abundant, free 3-hour on-street parking throughout downtown Salem, and three multi-story parking ramps that offer free customer parking in downtown Salem too.

Our attorneys are only licensed to practice law in Oregon. This site may be considered advertising under Oregon State Bar rules. There is no legal advice on this site so you should not interpret anything you read here as intended for your particular situation. Besides, we are not representing you and we are not your attorneys unless you have hired us by entering into a representation agreement with me. While we do want you to consider us when you seek an attorney, you should not hire any attorney based on brochures, websites, advertising, or other promotional materials.  All original content on this site is Copyright John Gear, 2010-2022.

Photos used under Creative Commons from Tony Webster, brand0con, eirikso, Fibonacci Blue, Jirka Matousek, Rd. Vortex, rcbrazier - Brazier Creative, cogdogblog, marfis75, marcoverch, GWP Photography, byzantiumbooks, Mic V., notacrime, emrank, Family Art Studio, dotpolka, respres, Mark Cummins, a little tune, Insulinde, Bill Wards Brickpile, Roger Chang, AnthonyMendezVO, jonrawlinson, Andres Rueda, Franco Folini, inman news, Pictures by Ann, ph-stop, crabchick, Jilligan86, Elvert Barnes, p.Gordon, CarbonNYC, Digital Sextant, darkpatator, Neil T, rictic, Mr. Mystery, SeanC90, richardmasoner, www.metaphoricalplatypus.com, lindsayloveshermac, Santacreu, =Nahemoth=, ReinventedWheel, LadyDragonflyCC - On Vacation, See you all soon!, Mr. T in DC, Nisha A, markcbrennan, Celestine Chua, Furryscaly, smkybear, CarbonNYC, radioedit, Don Hankins, Henrik Hovhannisyan, CoreBurn, Mike Licht, NotionsCapital.com, David Masters, SeeMidTN.com (aka Brent), SoulRider.222, amboo who?, robwest, Rob Ellis', floeschie, Key Foster, TechCocktail, That Other Paper, marcoverch, oskay, Muffet, rodaniel, Alan Cleaver, Mike Licht, NotionsCapital.com, Horia Varlan, xJasonRogersx, billaday, BasicGov, One Way Stock, mikebaird, Nevado, shalf