2017 Equifax Hack - What to Know and What to do About it.

Equifax Logo.png

Believe it or not, there were some non-hurricane news in the last 2 weeks.  By now you have probably heard of the massive Equifax hack.  If it's starting to sound like a broken record, that is because this is already the 29th large scale data breach of 2017, and we've still got 4 months to go before we hit 2018.  Here is what you should know and what you can do about it.

Who is Equifax?

Equifax is a publicly traded (NYSE: EFX), multi-billion dollar company headquartered in Atlanta, GA.  With over $3 billion in annual revenue and over 9,000 employees in 14 countries, Equifax is one of the 3 major credit bureaus - the other two being Transunion and Experian.   Equifax keeps track of consumer credit and insurance data, and sells it to businesses such as banks who use that information to determine whether or not your mortgage application should be approved and at what interest rate.  

What happened?

On September 7, 2017, Equifax announced that they were the victim of cybercriminal hacking with unauthorized access to the private financial information of ~143 million US consumers.  The hack occurred from mid-May through July 2017 and was discovered on July 29, 2017.  The information accessed includes names, social security numbers, birth dates, addresses, driver's license numbers, credit card numbers, and certain dispute documents with personal identifying information.  In short, all the information a cybercriminal will need to steal your identity.

Who's impacted?

Equifax has launched a dedicated website (https://www.equifaxsecurity2017.com)  to deal with the hack.  You can check whether or not you were personally impacted HERE by entering your last name and the last six digits of your social security number.  Don't hold your breath though, it seems that the only message the website spits out is a generic "Based on the information provided, we believe that your personal information may have been impacted by this incident."

What you should do

As with corporate hacks of this nature, Equifax is following the playbook by offering free credit monitoring and protection via its TrustedID Premier product for free to US consumers for 1 year.  Initially, enrolling in this free service meant giving up your right to sue.  However, after some public backlash, Equifax removed the arbitration clauses & class action waiver from its terms of use specifically regarding this incident. So you should probably go ahead and enroll in the service.  But here is the thing - if your information was stolen, it is lost forever.  And there is nothing preventing criminals from using your identity after 1 year.

So here are a few additional options you should consider:

  1. Place a Fraud Alert - allows creditors to get a copy of your credit report if they take steps to verify your identity.  For example, calling you on the phone to verify if you actually applied for that fancy new credit card.  Placing a Fraud Alert is free.  The initial alert lasts for 90 days but can be extended for 7 years.
  2. Consider a Credit Freeze - this allows you to restrict access to your credit report, which makes it difficult for ID thieves to open new accounts in your name.  The problem?  It also becomes difficult for YOU to open new accounts in your name.  Each time you need to access your credit report, you will need to lift the credit freeze, which may incur a fee.  
  3. Enroll in additional credit monitoring and protection services - Equifax isn't the only game in town.  There are a large number of credit monitoring services available.  Some are free like CreditKarma and CreditSesame.
  4. Check your existing accounts closely - Fraud alerts and credit freezes may be great for preventing new unauthorized accounts.  But it does nothing to your existing accounts.  Be sure to read your bank and credit card statements.  Alternatively, consider tracking all of your transactions using an aggregator service such as Mint.com or Personal Capital
  5. File your taxes early - as soon as you have all the documents you need.  The information identity thieves need to file a fraudulent tax return are exactly the same ones stolen in this Equifax hack.  Try to beat the bad guys to the punch.

Unfortunately identity theft is becoming increasingly prevalent in our high-tech lives.  There is simply no way to protect yourself 100%.  As the Equifax hack has proven, even if you never use your credit card online, the thieves can still get your information from someone else.  As all of the options I've listed suggest - to prevent identity theft, your best defense is a good offense.


Sponsor Highlight

Since 1993, Set For Life Insurance has been a national leader in helping thousands of physicians with their disability insurance needs. They have the largest portfolio of available exclusive discounts in the country. Set for Life also has the largest availability of unisex rates nationwide helping women save significantly. As independent brokers, they shop around and help compare plans to find the most suitable policy at the best available price. Jamie Fleischner, President of Set for Life, is known for her responsive, knowledgeable, and down to earth manner when working with her clients.


Future Proof, MD

Dr. Bo Liu is an aspiring radiologist-in-training and the founder and editor of the White Coat Money Blog.  He has an interest in interventional radiology and helping his medical colleagues get ahead in this mad world of medicine and money.  When he's not crushing the list at the PACS station or typing up your next favorite blog post, you can usually find him at the local badminton club, movie theater or the most recently opened restaurant.