The Equifax Data Breach: What to Do

Share This Page

If you have a credit report, there’s a good chance that you’re one of the 143 million American consumers whose sensitive personal information was exposed in a data breach at Equifax, one of the nation’s three major credit reporting agencies.

Here are the facts, according to Equifax. The breach lasted from mid-May through July. The hackers accessed people’s names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. They also stole credit card numbers for about 209,000 people and dispute documents with personal identifying information for about 182,000 people. And they grabbed personal information of people in the UK and Canada too.

There are steps to take to help protect your information from being misused. Visit Equifax’s website, (This link takes you away from our site. is not controlled by the FTC.)

  • Find out if your information was exposed. Click on the “Potential Impact” tab and enter your last name and the last six digits of your Social Security number. Your Social Security number is sensitive information, so make sure you’re on a secure computer and an encrypted network connection any time you enter it. The site will tell you if you’ve been affected by this breach.
  • Whether or not your information was exposed, U.S. consumers can get a year of free credit monitoring and other services. The site will give you a date when you can come back to enroll. Write down the date and come back to the site and click “Enroll” on that date. You have until January 31, 2018 to enroll.
  • You also can access frequently asked questions at the site.

Here are some other steps to take to help protect yourself after a data breach:

  • Check your credit reports from Equifax, Experian, and TransUnion — for free — by visiting Accounts or activity that you don’t recognize could indicate identity theft. Visit to find out what to do.
  • Consider placing a credit freeze on your files. A credit freeze makes it harder for someone to open a new account in your name. Keep in mind that a credit freeze won’t prevent a thief from making charges to your existing accounts.
  • Monitor your existing credit card and bank accounts closely for charges you don’t recognize.
  • If you decide against a credit freeze, consider placing a fraud alert on your files. A fraud alert warns creditors that you may be an identity theft victim and that they should verify that anyone seeking credit in your name really is you.
  • File your taxes early — as soon as you have the tax information you need, before a scammer can. Tax identity theft happens when someone uses your Social Security number to get a tax refund or a job. Respond right away to letters from the IRS.

Visit to learn more about protecting yourself after a data breach.

Note: This post was updated on October 5, 2017 to reflect that Equifax extended the enrollment period for free credit monitoring from November 21, 2017 to January 31, 2018.




I have been trying for three days to get the free credit monitoring , all I get is a window saying be patience . This is BS . Be patience well may accounts are hacked!

Enrollment process is totally useless --- keeps defaulting to a page requesting last name and last six of social security number. Called help line and was referred to another phone number for "help in enrolling" but that phone number is constantly busy. Apparently Equifax doesn't want anybody to enroll.

Just went to Equifax website and everything went smoothly. I was told that I will receive an email shortly to complete the process. They worked out the bugs. Yea

i applied for 1 year data protection. So far, I have not received an email that will allow me for data protection. It was told within a week an email will be sent but nada. I might have lost again name address 6 digits of SSN for enrollment purposes. What acrap.

I followed all the instructions on the site to enroll for the "complimentary" protection. It's been a week and still have not received email confirmation for my enrollment. I've called several times and they act as if they can't hear me well or tell me to call back b/c their system acting up. So fake! We need answers not excuses.

They are probably going to continue blowing us off until people just give up. It is not like they are actually going to do anything even if we successfully complete the sign up for the complementary protection.

I am one of the people effected by the Equifax security breach. I completed the form online and was told I will receive an email. That was 7 days ago. Today I called them and got someone named Otis (no last name-said it was private!). He said I would get the email in 10 days and that it would have a confirmation number. When I asked what that confirmation number would do for me, he couldn't tell me. Finally he said it would monitor my credit report. I asked what "monitoring" meant and he couldn't tell me. He said they just know that if someone asks for my credit report, they know it isn't me. Then he said, they know because they would ask me for my SS#. When I pointed out that the hackers know my SS#, he said I was dumb and excitable. When I asked to talk to a supervisor, he said they didn't exist. Are these the type of people they are using in their call center? It's not my fault this breach happened, it's theirs. There is no email to write to them.

TrustedID is not working, even if you have your account set up. Mine is now fully set up and I just received an email indicting a credit alert from TrustedID regarding activity on my account, but their online site keeps crashing, so I cannot see or evaluate the nature of the alert. The solution offered by Equifax is becoming useless vapor and failing in its essential purpose.

Also, the TrustedID alert/fraud phone line identified in the e-mail gives me a BUSY SIGNAL!!

SSA should issue everyone who may be affected a new social security number (which can be linked to the old number in SSA's data base) BEFORE any ID theft actually occurs!

The worst part about that is that to use SSA or VA websites you need to have your information verified by...Equifax.

Why does the federal government rely on an incompetent company and the answer to fix the problem is to go back to said incompetent company?

Even worse, the federal govt's online sites with Social Security and the Veteran's Administration all require you to "verify identity" using Equifax.

Then the federal government pushes out this Equifax website nonsense.

The fed should themselves be addressing this critical problem with critical information as the incompetent company has caused enough problems.

Gee I'm looking at my SS card and it says "to be used for social security and tax purposes NOT FOR IDENTIFICATION" thanks Mr Politician for voiding my protection!!!!

What an absolute disgrace. Still have yet to receive any response or email from Equifax after enrolling in their TrustedID service. We enrolled almost a week ago and have contacted them as well and still get the same run around. Like many people we'll be filing a complaint with our State Attorney General's office.

I went to the Equifax website @ I typed in my last name and the last 6 digits of my Social Security number. The result indicated I was affected by the Equifax data breach and to sign up my personal information for TrustedID. Next I returned to type in my family’s last name and last 6 digits of their Social Security numbers. The results indicated all were affected by the Equifax data breach and to sign up their personal information for TrustedID, Again I returned to type in make-believe last names and make-believe Social Security numbers. The results indicated all were affected by the Equifax data breach and to sign up their personal information for TrustedID, The conclusion is Equifax TrustedID does not do a real data search on real people’s names & their Social Security numbers. Even bogus names & bogus Social Security numbers give the same results that everyone affected were affected. Do not trust Equifax.

Equifax is either continuing to demonstrate their complete incompetence or they are just outright scamming the public. Three steps are required to obtain the Trusted ID (ha ha ha isn't that name ironic?) I finally received notice that “It is time to take the final steps in enrolling in your free product, TrustedID Premier, by verifying your identity. To do this, you’ll need to answer some questions about yourself. Successfully completing this step will conclude your enrollment process and activate your product.” When you use the link provided with this email, it restarts the whole process. This is after waiting more than a week for the email. I guess we're on our own.

That sight......www. equifaxsecurity2017. com is just trying to get your money..........DON'T USE IT!

After creating an account login and answering the questions to activate TrustedID Premier, I received this message:

"Enrollment Error: We are unable to activate you online. Please contact Customer Service at 1.877.394.7074."

I called the number at about 8:00 pm Mountain Time; was on hold for 15 minutes; and then spoke with a representative for 5 minutes answering identity confirmation questions, e.g., "How much is your monthly car payment?"

The rep instructed me to wait 15 minutes and then click the activation link in the email again. I did that, logged in to my TrustedID account, and received a message saying my TrustedID enrollment was "processing", which is what the rep said it would say.

This is ALL unbelievable! We are stuck to terms we never agreed to, creditors who sale our personal info as if it were theirs, slaves to a credit system that makes the poor pay more, the rich pay less (if anything at all!)and bound by a system that limits our rights when we are victimized, but hand down the gauntlet when we late one payment. Does any of this sound fair? Just? American?

This whole concept seems absurd to me. The three credit reporting agencies collect personal, private data on individuals and now, in order to help ensure the data is kept private, we will need to pay $10. Then, when we apply for credit, we will need to pay an additional $10 to unfreeze it, then another $10 to refreeze it.
I think I'll open a credit reporting agency.

Went to sign up for free Trusted ID Premier. All OK until they required a cell number for a text message ---
"We will attempt to verify your identity by a one-time passcode sent via text to your mobile phone number. Standard text message and data rates apply."

I have never sent or received a text message and have no way to do so. They offer no alternative (e.g., email) means of verifying or sending passcode.

I just like to know where to go to sue Equifax, it is what all consumers affected should do.

I won't enter my SS No on their site or any site. I will continue to closely monitor all my accts like I always do. Be diligent people! Don't rely on these crooks!

I do not want to enter my information into a site that is known for allowing a breach to occur. Do you think they have actually fixed everything already? Furthermore, the comments indicating their site does not work properly indicate they don't have good programming practices. Yet we are told to enter our info to find out if we are at risk. No, they need to fix this without getting more information. Notify those at risk, rather than asking everyone to give them more info.

If may husband and I have had credit together for over 50 years, do we need to freeze credit in both names?

You and your husband might have joint accounts for credit cards or your mortgage, but you have individual social security numbers, birthdays, names, identities and credit reports.


You each have a personal credit report in your name that includes information about where you have lived, accounts you have had, how you have paid your bills, and whether you’ve been sued or have filed for bankruptcy.

If a thief gets your personal information, or your husband's, and you don't have a freeze on the credit report, the thief could open new accounts in that name. Read more about Credit Freezes.

I can not sign up for the free credit monitoring because of the requirement that I have a cell phone, which I do not, to text a one time passcode. I only have a land line so I cannot receive text messages. How am I supposed to sign up for this? Why can't they use my email address. This is crazy.

If the SEC was on ball these guys should have been arrested and given a bail hearing. The bail amount should be the same as the proceeds from the stock sale.

The sign-up for Equifax's monitoring service is not working. I signed up on September 13 and was told to wait for an email to confirm. Seven (7) days later and no email. When I called Equifax I was told to wait for a few more days! Pure crap!

Talked to a rep. Said govt is to blame. Also said I shouldn't be afraid to give SS# out. she had an attitude too. Company is a joke.

So I understand they 'might' have recended the you can't sue us clause, but I will take no chances, though it says I'm safe, I seriously doubt that. At this time, Equifax is looking more and more like Enron and does NOT need to be in business anymore. Should there be even one thing popping up on my credit monitoring service that is third party(not signing up for credit monitoring through a company who just had one breach that they told us about) I know exactly who to come after with pitchforks and torches.

It doesn,t matter what we do to protect ourselves,. The system is such that we are screwed!!! The big boys will do what they can get away with, we don't count. That,s not bitterness, that,s just how it is. If at all possible pay cash, live within your means!! it

I signed up and have yet to receive my confirmation email. That was a week ago. I checked all folders in my email and nothing, nothing in spam either

I signed up and have yet to receive my confirmation email. That was a week ago. I checked all folders in my email and nothing, nothing in spam either

I enrolled for the Trusted ID monitoring and after a few days received an email saying "There was a problem activating your product" with no further information. I replied to them and never heard back. Then, I called Equifax Customer Care Team at 877-742-1415. After 25 minutes, the representative told me I should have called TrustedID at 888-548-7878. There was not even an automated menu that prompt caller through it. The phone kept ringing until it gets disconnected. I feel like I am getting the goaround without a resolution in sight.

This same thing happen to me. I don't trust them. So now I'm reading articles to learn how to protect myself and my mother's credit and identity. All this seems so wrong that we should be punished because Equifax failed to do their job.

I have heard that if you have signed up for the frre 1 year coverage in order to retain your rights to sue individually or as part of a class action lawsuit you must deliver in writing to Equifax a disclaimer of releasing those rights. If you do not, then you have thrown those rights away. Where do we send that letter and who pays to have it sent registered mail?

The Equifax site has some Frequently Asked Questions for Consumers. That includes information about what happens to your legal rights if you enroll in the monitoring and other products.

Last week I checked equifax, response was my records may have been impacted, I enrolled in the free one year monitoring, then got message I will receive an email with link to finalize my enrollment to activate it. Still haven't received the e-mail. Just tried to enroll again, got the same message, wait for e-mail with link to finalize.(?) Anyone else get this response? Thanks.

Same thing here, after signing up I got an email on 09/14 saying that I would receive an email link to finalize, but I still haven't received it yet.

Same thing. Frustrating!

Equihacks you suck. I hate you.

Hey, we may have given your info to scammers so here, enter your DOB & Social Security number on this form so we can protect you...
Thank you, no.

I would like to end my relationship with Equifax. Please delete my information from your files. You no longer have my permission to have my information.

What do you mean I can't end my relationship with Equifax? I don't think you understand. I am not happy with your failure to protect my most sensitive and important information, so I would like to cease doing business with you. There are two other agencies that can keep my information. It is MY information isn't it?
I am officially requesting that Equifax no longer keep my information. Why can't I do that? Do you have some legal right to gather and keep personal information on people against their will?

If you file a credit freeze online you should receive a PIN but according to the Equifax website as of Sept. 14, 2017 some people who signed up "were not able to view their PIN." The cause was because of the customer's "browser settings" and Equifax is working on a fix for this issue. They claim to display a phone number that consumers may call to receive a pin but no number is displayed to call. Their call center gives out a number that might help but it is always busy. So now I have a Credit Freeze but no way to know my PIN to remove the Credit Freeze if I need to. The suggestion was made that I should send all of my information along with copies proving my identity to a Post Office Box for Equifax. They suggested copies of my Social Security Card, Birth Certificate, Driver's License, etc. I am not willing to send those to a company that has set up a credit freeze system that doesn't work properly and who has had a breach of such proportions and expects more personal information to be sent to a PO Box. What a mess!!!

When u go to enroll for Trusted ID they want too much info. Social, Nam, Birth date, address, how long at address. They have all this info. Don't want to put it out there again

After many tries getting an "error" message, I was finally able to get to get past the first page, and now the instructions say to select which security freeze option you would like to request. The two selections available are both regarding lifting a freeze. I cannot do that without the 10 digit pin, which I never received because I never was able to place the freeze to start with because of all the error messages. I called the "help" center on Saturday and was told this was also a glitch in the system because of over use, be patient, and it would be fixed in a few days. Today is Wednesday and nothing has changed. As anyone else had this problem?

Also enrolled in free monitoring on Saturday, and have not received email either.

So it should just be people with a credit history that are affected, correct? It said that I am affected, but my husband is not. I decided to check on our children. One of our kids (age 17) with no credit history got the message saying that his information may have been affected. Why would it say this? He does have a fast food job, a driver's license, and he took the ACT. Would Equifax collect information from those?? He has a debit card from his checking account, but he does not have any type of credit card or loans. I checked him out on Trans Union, and they do not have a file on him, which would be correct since he's a kid in school with no credit history. So is he at risk? Or could he just happen to have the same last 6 digits and same last name as someone else who may be affected? Could anyone help answer this??

Someone could misuse a child's Social Security number to open a bank account or credit card or apply for a loan. Learn how to check for child identity theft, and how to repair any damage you find.


Leave a Comment

Comment Policy