NewsNational News

Actions

How to check and see if your information was affected by the Equifax data breach

<p>After a <a href="https://www.newsy.com/stories/credit-agency-equifax-hit-with-hack-143m-affected/" target="_blank">security breach</a> at Equifax compromised the personal data of around 143 million people, the company is trying to make amends by offering potential victims a free year's worth of its credit reporting service, TrustedID.</p><p>But the fine print of that deal has some people worried that it might limit people's legal options against Equifax.</p><p>Both TrustedID's and Equifax's main sites have arbitration clauses in the <a href="http://www.equifax.com/terms/" target="_blank">terms of service</a> that prohibit users from joining a class-action suit against the company.</p><p><a href="http://www.oregonlive.com/portland/index.ssf/2017/09/two_oregon_residents_file_clas.html" target="_blank">At least two</a> <a href="http://www.tampabay.com/news/business/realestate/new-class-action-suit-says-equifax-let-criminals-steal-your-personal/2336749" target="_blank">class-action suits</a> about the incident are gearing up in the courts, and it's not clear anyone who signs up for TrustedID will be allowed to join those suits.</p><p><b>SEE MORE: <a href="http://www.newsy.com/stories/9-in-10-health-care-organizations-might-ve-faced-data-breach/">9 In 10 Health Care Organizations Might've Faced A Data Breach</a></b></p><p>The company has since stated that TrustedID's arbitration clause won't apply to the cybersecurity incident. But again, it's not clear whether the overall site's terms of service exempt the breach victims as well.</p><p>Arbitration clauses have been at the center of a political dispute in D.C. A pending rule from the <a href="https://www.washingtonpost.com/news/get-there/wp/2017/07/10/consumer-watchdog-makes-it-easier-to-sue-banks-and-other-companies/?tid=a_inl&utm_term=.be6b1735fa9e" target="_blank">Consumer Financial Protection Bureau</a> would ban companies from putting them in terms of use — but congressional Republicans are <a href="https://www.forbes.com/sites/dianahembree/2017/08/30/republicans-accelerating-repeal-of-cfpb-rule-protecting-consumers-right-to-sue-banks/#71275ac740b9" target="_blank">trying to repeal</a> the rule before it goes into effect.</p><hr><b>Trending stories at <a href="http://www.newsy.com">Newsy.com</a></b><ul class="inline-related-links"><li><a href="http://www.newsy.com/stories/fbi-is-investigating-uber-for-how-it-tracked-lyft-prices/">The FBI Is Investigating Uber's 'Hell' Program For Tracking Lyft</a></li><li><a href="http://www.newsy.com/stories/amazon-is-expanding-to-a-second-north-american-headquarters/">Amazon Is Expanding, And It Could Be Coming To A City Near You</a></li><li><a href="http://www.newsy.com/stories/assessing-the-gender-pay-gap/">Assessing The Gender Pay Gap</a></li></ul>
<p>Credit reporting agency <a href="https://www.equifaxsecurity2017.com/" target="_blank">Equifax says</a> it's been hit with a serious cyberattack that could put millions of Americans' personal info at risk.</p><p>Names, Social Security numbers and addresses were all exposed during the breach. About 143 million Americans were exposed: for reference, the <a href="https://www.census.gov/2010census/popmap/" target="_blank">2010 Census</a> recorded almost 309 million people living in the U.S.</p><p><b>SEE MORE: <a href="http://www.newsy.com/stories/hackers-target-nuclear-plants-critical-infrastructure/">Hackers Are Targeting Nuclear Plants And Critical Infrastructure</a></b></p><p>Credit card numbers for about 209,000 U.S. customers were also accessed during the breach.</p><p>Equifax CEO <a href="https://www.youtube.com/watch?v=bh1gzJFVFLc" target="_blank">Rick Smith said,</a> "This is clearly a disappointing event that strikes at the heart of who we are and what we do."</p><p>Equifax is offering free credit monitoring and identity theft protection to anyone affected by the hack. Affected Equifax consumers can get in touch with the company at <a href="https://www.equifaxsecurity2017.com/" target="_blank">www.equifaxsecurity2017.com</a> or by calling 866-447-7559.</p><hr><b>Trending stories at <a href="http://www.newsy.com">Newsy.com</a></b><ul class="inline-related-links"><li><a href="http://www.newsy.com/stories/t-mobile-now-offers-free-netflix-with-netflix-on-us-promo/">T-Mobile Wants To Give You Free Netflix</a></li><li><a href="http://www.newsy.com/stories/elon-musk-artificial-intelligence-could-cause-world-war-iii/">Elon Musk Thinks Artificial Intelligence Could Cause World War III</a></li><li><a href="http://www.newsy.com/stories/nintendo-video-game-character-mario-isn-t-a-plumber-anymore/">Nintendo's Iconic Video Game Character Isn't A Plumber Anymore</a></li></ul>
Posted
and last updated

You may have never used Equifax yourself -- or even heard of it -- but the credit reporting agency could still have a treasure trove of your personal information.

Equifax said Thursday that 143 million people could be affected by a recent data breach in which cybercriminals stole information including names, Social Security numbers, birth dates, addresses, and the numbers of some driver's licenses.

Additionally, credit card numbers for about 209,000 people were exposed, as was "personal identifying information" on roughly 182,000 customers involved in credit report disputes.

Equifax is one of three nationwide credit-reporting companies that track and rate the financial history of U.S. consumers. It gets its data -- without you even knowing -- from credit card companies, banks, retailers, and lenders.

Equifax will not be contacting everyone who was affected, but will send direct mail notices to those whose credit card numbers or dispute records were accessed.

Related: 5 things to do if you're worried about the Equifax hack

The company suggests you sign up for credit file monitoring and identity theft protection. It is providing free service for one year through TrustedID Premier -- whether or not you've been affected by the breach.

To enroll, go to www.equifaxsecurity2017.com and click on the Check Potential Impact tab. You must submit your last name and last six digits of your Social Security number there.

At that point you'll receive a message telling you whether you've been impacted by the hack. Then you'll be given a date when you can return to the site and sign up for the monitoring service. The enrollment process is scheduled over several days to minimize delays, the Equifax website says.

If you sign up for Equifax's offer of free protection, you may be limiting your rights to sue and be forced to take disputes to arbitration. But you can opt out of that provision if you notify the company in writing within 30 days.

Related: Want help from Equifax? There are strings attached

The company also recommends that you review account statements and credit reports yourself to check for incidents of fraud. You can request a copy of your credit report online at www.annualcreditreport.com. You are allowed a free copy once a year from each of the three credit reporting agencies: Equifax, Experian, and TransUnion.

If you see any unauthorized activity, immediately report it to your bank and/or credit card company. If you believe you've been a victim of identity theft, you should also contact law enforcement.

Related: Equifax execs sold stock before hack disclosed

Another way to protect yourself is by immediately placing fraud alerts on your credit reports, according to credit expert John Ulzheimer, who previously worked at FICO and Equifax. This means that a lender must contact you to verify your identity before it issues credit in your name. You can place an alert on your report for free by contacting one of the credit agencies, which is required to notify the other two. It will last for 90 days and can be renewed.

Since cybercriminals may have accessed what Ulzheimer calls the "crown jewels of information" at Equifax, he also suggests putting a long term freeze on your credit.

A freeze takes your credit report out of circulation. If someone else goes to take out a loan in your name, the lender will not be able to pull your report and therefore cannot extend the credit. If you want to take out a loan yourself, you'll have to contact the reporting agency to temporarily lift the freeze. Fees to freeze your account vary by state, but commonly range from $5 to $10.

"It's a pretty extreme measure, but when 143 million people have been exposed like this, I think you have to take it," Ulzheimer said.

Related: The biggest data breaches ever

The Federal Trade Commission's website, www.ftc.gov/idtheft, also offers information about how to protect yourself against fraud.

If you have more questions for Equifax, the company has set up a designated call center at 866-447-7559.

--CNN's Chris Isidore contributed to this report.

Have you been affected by the Equifax hack? Have you ever had your identity stolen? Tell us about it and you could be included in an upcoming CNNMoney story. Click here.

The-CNN-Wire
™ & © 2017 Cable News Network, Inc., a Time Warner Company. All rights reserved.