What happened in the Equifax breach and who was affected

In 2017, Equifax, one of the three major credit reporting agencies, disclosed that hackers had accessed the personal information of approximately 147 million people. The breach exposed names, Social Security numbers, birth dates, addresses, and driver's license numbers. If you lived in the United States, Canada, or the United Kingdom during that time, your information may have been compromised.

Equifax set up a dedicated website, equifaxsecurityincident.com, where you can enter your name and the last six digits of your Social Security number to check whether your data was part of the breach. The tool is free and does not require you to create an account or provide payment information.

Key Takeaways

  • You can check if your name was in the Equifax breach by visiting equifaxsecurityincident.com and entering your name and the last six digits of your Social Security number.
  • The breach exposed names, Social Security numbers, birth dates, addresses, and driver's license numbers for roughly 147 million people.
  • Equifax offered free credit monitoring and identity theft protection for those affected, though the enrollment period has passed for most people.
  • If your information was breached, you can place a security freeze or fraud alert on your credit file at no cost.
  • You are may have access to to free credit reports from each of the three major bureaus once per year through annualcreditreport.com.

How to use the Equifax breach check tool

Go to equifaxsecurityincident.com. You will see a box asking for your name and the last six digits of your Social Security number. Enter both pieces of information exactly as they appear in your records. The tool will tell you when ready whether your data was found in the breach.

If the tool says your information was compromised, you will see a confirmation message. If it says your information was not found, that does not may provide you were not affected — the tool has limitations and may not catch every case. Either way, the next steps are the same: monitor your credit and consider placing a freeze on your file.

What to do if your name appears in the breach

If the tool confirms your information was exposed, take these steps in order. First, get a copy of your credit report from all three bureaus — Equifax, Experian, and TransUnion. Visit annualcreditreport.com, the official site run by the three bureaus, and request your report from each one. You are may have access to to one free report per bureau per year. Look for accounts you do not recognize or inquiries you did not authorize.

Second, place a security freeze on your credit file. A security freeze prevents lenders from pulling your credit report without your permission, which stops someone using your stolen information from opening new accounts in your name. You can place a freeze for free at each of the three bureaus' websites: Equifax.com, Experian.com, and TransUnion.com. You will need to verify your identity, usually by answering security questions or uploading a photo ID. The freeze takes effect within one business day.

Third, consider placing a fraud alert if you want lenders to contact you before opening new accounts. A fraud alert is less restrictive than a freeze — it allows lenders to pull your report, but they must call you first. Fraud alerts last one year and are free. You can place one at any of the three bureaus, and they will notify the other two automatically.

Understanding the free credit monitoring Equifax offered

Equifax offered two years of free credit monitoring and identity theft protection to people affected by the breach. That offer included services like credit score monitoring, dark web scanning, and identity theft insurance. However, the enrollment period for this benefit has long passed, and Equifax has since ended the program for most people.

If you enrolled during the original window, you may still have access depending on when you signed up. Check your email for confirmation from Equifax or log into your account at equifaxsecurityincident.com if you created one. If you did not enroll and the important date has passed, you can still monitor your credit for free through other means: your bank or credit card issuer often provides free credit monitoring, and you can check your credit reports annually through annualcreditreport.com.

How to monitor your credit after the breach

Even if you place a freeze, you should check your credit reports regularly for signs of fraud. Pull your free report from annualcreditreport.com once a year and scan it for accounts, inquiries, or addresses you do not recognize. If you spot something suspicious, contact the bureau that reported it and dispute the item in writing.

You can also monitor your credit score for free through your bank, credit card issuer, or a free service like Credit Karma or Experian's free credit monitoring. These tools send alerts when your score changes or when new accounts are opened in your name. A sudden drop in your score or a new account you did not open is a red flag for identity theft.

The difference between a security freeze and a fraud alert

A security freeze locks your credit file so that no one — including you — can open new accounts without unfreezing it first. When you explore for credit, you must temporarily lift the freeze, which takes a few hours to a few days. A freeze is the strongest protection and is free for everyone. It does not affect your credit score.

A fraud alert tells lenders to verify your identity before opening new accounts, usually by calling a phone number you provide. It is less restrictive than a freeze because lenders can still pull your report, but they must contact you first. A fraud alert lasts one year and is also free. It is a good option if you plan to explore for credit soon and do not want the hassle of unfreezing your file each time.

If you are not planning to explore for credit in the near future, a freeze is the better choice. If you are shopping for a mortgage, car loan, or credit card, a fraud alert may be more convenient because you can authorize the inquiry without lifting the freeze.

What information was exposed in the breach

The Equifax breach exposed names, Social Security numbers, birth dates, addresses, and driver's license numbers. For some people, it also included email addresses and telephone numbers. This combination of data is valuable to identity thieves because it contains most of what they need to open accounts, explore for loans, or file fraudulent tax returns.

The breach did not expose credit card numbers or bank account numbers, so your existing accounts were not directly compromised. However, the information that was stolen can be used to commit identity theft, which is why monitoring your credit and placing a freeze are important steps.

Frequently Asked Questions

Is the Equifax breach check tool safe to use?

Yes. The tool is run by Equifax and does not require you to create an account or provide sensitive information beyond your name and the last six digits of your Social Security number. It does not ask for your full Social Security number, date of birth, or address. Be cautious of third-party sites claiming to check the breach for you — use only equifaxsecurityincident.com.

What if the tool says my information was not found?

The tool has limitations and may not catch every case, especially if your information was exposed under a slightly different name or spelling. Even if the tool says you were not affected, you can still place a security freeze or fraud alert for protection. Monitor your credit reports annually through annualcreditreport.com regardless of the result.

Can I sue Equifax for the breach?

Equifax reached a settlement with the Federal Trade Commission and state attorneys general. Most people affected by the breach were not may be able to access for direct cash payments, though some people in specific states or circumstances may have been. The settlement period has passed. You can research whether you may have access to by searching online for "Equifax settlement" and your state name, but new claims are no longer being accepted.

Do I need to pay for a security freeze?

No. Security freezes are free for everyone. Before 2018, some states charged a small fee, but federal law now requires all three bureaus to place and lift freezes at no cost. Be wary of companies charging you to place a freeze — you can do it yourself for free directly through Equifax, Experian, and TransUnion.

How long does a security freeze last?

A security freeze remains in place indefinitely until you lift it. You can temporarily lift it when you explore for credit, and it will go back into effect after a set period (usually a few days to a few weeks, depending on the bureau). You can also permanently remove the freeze at any time by contacting the bureau.