Data breaches have affected millions of people in recent years. Social Security numbers, birth dates, addresses, and driver's license numbers have all been exposed in hacks. If your personal information was taken as part of a data breach, someone has stolen your identity, or you have reason to believe that you're likely to become the victim of identity theft, you should initiate a credit freeze. A credit freeze prevents a thief from opening up accounts in your name and ruining your credit.
Credit freezes—often called "security freezes"—basically seal your credit history. The freeze prevents a credit reporting bureau from releasing your credit information to a third party. So, if a thief tries to use your Social Security number and other personal information to apply for a mortgage loan or another form of credit, the creditor would reject the application because it couldn't check your credit.
A credit freeze generally doesn't have an impact on your existing accounts.
A common misconception is that a credit freeze means you can't use your current forms of credit, like a credit card. But your credit report isn't accessed when you purchase something with a credit card. So, freezing your credit file doesn't affect your ability to use your existing accounts.
Freezing your credit also won't prevent misuse of your current accounts. If the thief stole your credit card information, that person can use your existing credit card during a credit freeze.
Even under a credit freeze, an existing creditor can access to your credit report for certain types of account review, collection purposes, fraud control, or related activities. For example, the following entities may still access your credit report during a freeze:
It is generally advised that you request a credit freeze at the three national credit reporting agencies—Equifax, Experian, and TransUnion—if:
You may request a security freeze by contacting Equifax, Experian, and TransUnion individually. You can make your request:
You must make separate freeze requests with each credit bureau.
The freeze generally remains in place until you choose to lift or "thaw" it. When you place a credit freeze on your file, you'll receive a personal identification number (PIN) or password that you can use to:
Under federal law, the bureau must lift the security freeze not later than:
In the past, the cost of imposing a credit freeze varied between states. It typically ranged between $3 and $10 for each credit reporting agency. Lifting the freeze temporarily or removing the freeze altogether also used to cost a fee.
Now, though, thanks to the federal Economic Growth, Regulatory Relief, and Consumer Protection Act (Senate Bill 2155), placing and lifting a credit freeze is free in every state. (15 U.S.C. § 1681c-1).
To learn more about how to protect yourself if someone steals your identity or what to do after your personal information is compromised in a data breach, go to Identitytheft.gov. Identitytheft.gov is the federal government's main resource for identity theft victims. You can get a personal recovery plan, find sample letters to send to your creditors, and get an Identity Theft Report. The website also provides valuable information about what to do after your identity is stolen, other possible steps you should take, and specific instructions for certain accounts such as utilities, phones, government benefits, checking accounts, etc.
If you need help dealing with collectors or if you're being sued because a thief used your identity to incur debts, talk to an attorney.
Need a lawyer? Start here.