Equifax was hacked in September 2017, affecting an estimated 143 million U.S. consumers. 143 million US consumers is basically the entire working US population! Only time will tell us what the true impact will be. Criminals usually need some time to parse through the information and organize their fraud strategies, so you may not see the effects until many months down the line.
When companies leak your credit card information, it is unfortunate – but then the big card brands re-issue you new numbers and largely absorb the fraudulent transactions costs. In other words, you are largely protected from the repercussions, provided you notify the card issuer when you see fraudulent activity.
On the other hand, cybercriminals having such a rich data profile of your identity, such as what was made available by the Equifax breach, is a much greater risk to your digital safety. This information, (e.g. Social Security number, birth date, address, driver’s license, and other personal information) can empower full-fledged identity theft, as well as a takeover of your existing digital accounts, such as your bank, brokerage or email.
Think about the last time you forgot your password to your bank’s website. When you reset your password, your bank usually asks you for information like your date of birth, your address, and the last four digits of your Social Security numbers – all private information that may now be in the hands of criminals.
As your information trickles through the black markets with initial thieves selling it to fraudsters, we will see what is the full extent of the damage that comes.
What To Do If You've Been Affected By The Equifax Hack Or Think You've Been Affected?
Here are some of the things you can do right now to be in a strong defensive position to mitigate the risks associated with these types of events.
New credit account fraud – the risk that fraudsters will create new accounts in your name, damaging your credit and possibly leaving you accountable for debt.
- Sign up for the free monitoring services – this should provide you with alerts when significant events happen. Monitor those closely. Equifax offers this for free now, but don’t forget that the free monitoring is for a limited time and if you do not want to pay for this, you will need to unsubscribe after a year. Do this before the next step as it may prevent you from subscribing to the monitoring if your file is frozen.
- Freeze your credit file – Reach out to credit agencies (Equifax, Transunion, Experian and Innovis) and request your file be put on a “security freeze.” This is possibly the most effective option to prevent identity theft since it will prevent anyone from opening new accounts in your name (including yourself!). This is not usually widely publicized because the industry wants you to open more accounts. Should you need to open new credit accounts for your own benefit, you would need to unfreeze and refreeze your accounts. In some cases, unfreezing may take some time, so plan ahead if you need a new car, house or credit card. Some bureaus may ask you to pay a nominal fee for this; it is usually well worth it compared to the cost of recovering from identity theft and usually voided if you can demonstrate a legitimate risk of being subject to identity theft.
- Monitor your credit file– You are entitled to at least one free credit report per year. Get this now and mark your calendar for next year. Dispute any anomalies. Use services or apps that will monitor this in real time.
Existing account fraud – the risk that your existing financial services account will be taken over, putting your current assets at risk.
- Actively monitor your financial accounts – In many cases, if you spot fraudulent transactions quickly you may be able to stop or contest them. This is not convenient when you have to log into all your financial institutions accounts independently. This is an area where Personal Capital can help out. Using our dashboard, you can link all your important accounts and easily keep an eye on things. Review this every day or sign up for our daily review email. Respond quickly if you see suspicious activity by contacting the financial institution responsible for the account.
- Change the way you do passwords – Most people will bore you with the usual “don’t reuse password” or “use super-complicated passwords” in the wake of such an event. While those are not bad advice, they are usually short on the how to make this practical. Here’s the how to effectively change how you do your passwords:
- Get a password manager tool; there are many out there. Getting one for your phone is usually simpler and more secure versus software on your desktop computer.
- Secure it with a very long passphrase that you will not forget. “Matt likes to dance in the rain” is better than “5ue@1s21%.”
- Once that is done, change all your passwords for important accounts to the long passwords that you will store in your password manager.
If you implement the action plan above, you should be able to reduce the potential impact to you and your family of this data breach. If you want to check your credit score or credit report, check out Experian. They are one of the big three credit score companies that did not get hacked.
In July 2019, Equifax has reached a deal to pay up to $700 million to state and federal regulators to settle probes stemming from a data breach that exposed the personal information of nearly 150 million people. It will be the largest settlement ever paid for a data breach.
About the Author: Sam began investing his own money ever since he opened an online brokerage account in 1995. Sam loved investing so much that he decided to make a career out of investing by spending the next 13 years after college working at two of the leading financial service firms in the world. During this time, Sam received his MBA from UC Berkeley with a focus on finance and real estate. He also became Series 7 and Series 63 registered. In 2012, Sam was able to retire at the age of 34 largely due to his investments that now generate roughly $200,000 a year in passive income. He spends time playing tennis, hanging out with family, consulting for leading fintech companies and writing online to help others achieve financial freedom.
FinancialSamurai.com was started in 2009 and is one of the most trusted personal finance sites today with over 1.5 million organic pageviews a month. Financial Samurai has been featured in top publications such as the LA Times, The Chicago Tribune, Bloomberg and The Wall Street Journal. This article was originally written by Personal Capital, a long-time partner of Financial Samurai.