Equifax Hack Check Tool, Free Year of Identity Theft Protection and Credit Monitoring

equifaxlogoEquifax announced that they were hacked between May-July 2017, exposing the personal information of potentially over 143 million people. As one of the three major credit bureaus, they have a lot of data: credit card numbers, social security numbers, birth dates, addresses, and driver’s license numbers. Essentially, everything you need for identity fraud.

Equifax has a Potential Impact Tool that lets you check if they believe your information has been exposed. You must provide your last name and the last six digits of your Social Security number. It seems that unless they say “you’re not affected”, then you should assume you were affected. No matter what, they are offering everyone a free year of Equifax TrustedID Premier service, which includes:

  • 3-Bureau credit monitoring of Equifax, Experian and TransUnion credit reports
  • copies of your Equifax credit report
  • the ability to lock and unlock your Equifax credit report
  • identity theft insurance
  • Internet scanning for Social Security numbers

They’ll give you a date and you’ll need to come back to activate. I suppose they need to make a queue with that many new “customers”. Equifax also set up a dedicated call center at 866-447-7559, open 7 days a week, 7am–1am Eastern time.

So the business that gets to collect all my personal data (and then charge me for a credit score based on that data) lost my data, and as an apology gives me a temporary subscription to their own identity protection service (which people pay for because… their data gets hacked). Does anyone else feel like there needs to be more of an incentive not to get hacked? This benefit only lasts for a year, so you may want to sign up for other free credit monitoring services. Also see the Big List of Free Consumer Reports on how to get a free full copy of your credit and other consumer reports.


  1. Kathleen Dresser says:

    This is a bunch of crap. They “think” my information may have been compromised, yet my enrollment doesn’t start until 9/13/2017. Today is 9/8/2017. I foresee a whole lot of lawsuits in the future…….

  2. Given the data that the credit bureaus have on everyone, this huge breach is very concerning. I think the best course of action for practically everyone is to freeze their credit reports at each of the three bureaus. With the credit monitoring typically offered when a breach occurs, you can receive timely notification that someone has successfully stolen your identity and opened credit in your name. With a freeze, the identity thief can’t open credit in your name. Unfortunately, there is a nominal charge ($10 in my state) to do the initial freeze and then again to temporarily or permanently “unfreeze” when you want a financial institution to access your report when you apply for credit. When I refinanced my mortgage last year, I had to pay $60 to unfreeze the credit reports for both my wife and me at each of the three bureaus. This was after paying $60 at some prior date to freeze our credit in the first place. I viewed these as unfortunate but necessary expenses. I hope that this breach causes federal and state lawmakers to pass laws to eliminate these fees. I plan to contact my representatives.

    Here’s a site information about credit freezes: http://clark.com/personal-finance-credit/credit-freeze-and-thaw-guide/

  3. My personal information has been stolen so many times I’ve lost count. It’s apparent to me at this point that we can never find and fix all the exploitable vulnerabilities of the internet and the devices that communicate over it. And even if we did, hackers still have a fairly reliable threat vector in the people working for these companies, who are exploitable through phishing, social engineering, etc.
    The fact that we identify ourselves by a unique number that we’re supposed to keep secret so nobody else can assume our identity seems silly in this day and age. Let’s hope someone devises a better way soon.

  4. FYI, signing up for Equifax TrustedID Premier service waives the right to sue Equifax

    From Techcrunch:
    “The site’s terms of service seem to state that by agreeing to use this service, the user is waving their rights to bring a class action lawsuit against Equifax.”

    • I saw that, I am not a lawyer but it would seem to mean in terms of using that TrustedID Premier service. I don’t see how they could get you to waive your right to sue Equifax for any reason, for all time.

  5. Another day, another data breach!!! This is a sad reality of the digital age. These companies must do better to protect personal data. And these companies should be better regulated by state/fed gov. to ensure that they are up for that. As citizens, we should make these companies accountable for their incompetency.

  6. I will continue with the freeze at all three agencies. Now I will refuse to do business with lenders who check equifax reports.

    Question: I wonder if the code required to unfreeze your equifax report was also stolen in the hack?

  7. The Potential Impact Tool is crap. Enter anything (e.g., Smith, 123456) and it gives a (false) positive and a future date to enroll. Yikes!

  8. the whole credit reporting model is broken and needs to be
    replaced. it’s very archaic and hard to believe we still use it.
    I wonder how other countries do it.
    Also, someone at equifax needs to go to jail or pay a heavy fine
    for this. Unfortunately, in this country corporate crime is rarely

    • I share everyone’s concerns about this data breach, but insisting on crushing some random person at Equifax’s life over it so you can feel better is probably a bit much. If something criminal occurred, sure — but just because a huge body of people collectively failed to prevent a particular intrusion is not grounds for personally punitive action. Would you like to be incarcerated for not doing your job perfectly all the time?

      Again, I understand the frustration, but I feel like people are a little too quick to jump on the notion that “someone should go to jail for this” whenever there is a tragedy. There needs to be a person who actually broke serious criminal laws for that to be appropriate.

  9. According to FrequentMiler the Equifax cure worse than the hack.

  10. I never gave this company permission to collect my personal information in the first place. This is the crux of the problem. It should be legally required to get my express consent prior to collecting/holding/exposing my personal information. I hope Equifax gets fined out of existence, and the executives who “didn’t know” sent to prison.

    • Apparently I was wrong. It has been pointed out that every time I have ever applied for credit of any kind, the application or papers I signed gave consent for this company to do this to me.

  11. you also need to check the fine print, i heard some of their stuff requires you to agree not to sue them or join a class action suit against them.

  12. Insider trading, waiving your class action suit rights and and a useless band-aid all in one package…these people are beyond vile and incompetent…..If you choose their monitoring product you can’t do a security/credit freeze and vice versa, so you have to choose between one strategy or the other. The experts, which excludes everyone at Equifax, suggest that the freeze is the better way to go. If you are over 65 or live in certain states, the freeze fee is waived. I’d suggest you call the Equifax corporate number 404-885-8000
    and demand to speak to a Supervisor not one of the useless Temps they bused in for this circus and who don’t know anything beyond the one page fact sheet Equifax puts in front of them and demand that Equifax put a freeze on for free. You might be surprised. But as far as Transunion and Experian don’t expect anything. You might also want to call the Attorney General of the State of Georgia where Equifax is headquartered 404-656-3300 ask for Anne Infinger in their Consumer Protection Division and demand from her that Equifax be forced to provide the freeze for free. The real reason that they don’t set up the monitoring real time is that they’ve calculated that 40% or more of the people calling in now will not come back and initiate the service thus relieving Equifax from having to provide it for free.


  13. The arbitration clause and class action waiver in the Equifax and TrustedID Premier terms of use does NOT apply to this cybersecurity incident. If you have enrolled in this service, you have NOT waived your right to participate in a class action lawsuit and you can still choose to seek legal action against them.

  14. My own company got hacked and they offered the standard 1 year all clear if service. Then they decided to make it a permanent benift, given that there is so much negative stuff with equaifax monitor I’ll just keep all clear. Not that it really help, it took months to see that I opened a new bank account.

  15. Hi Jonathan,

    Talking about a legal area, do you find a value in legal insurance plan, or pre-paid legal? I have Arag legal plan, but don’t see a point of continuing it.

Speak Your Mind