Equifax did not properly secure my protected personal information from intrusion, such as through appropriate patching, 2-factor authentication at the point of service, segmentation of data, etc. As such, it appears my full name, Social Security numbers, birth date, addresses, and possibly driver license number is cross-matched to each other and in the hands of criminals who can use this data to breach any number of accounts in perpetuity such as my banking and financial data, medical data, legal complaints, political data, and any other number of sensitive accounts.
Further, I am unable to secure these accounts because they ask for the very personal information that is breached in order to verify my identity and approve a change.
Equifax is currently offering a limited credit monitoring service, which does n't even activate immediately. Even this had to be sought out by those who see the news reports, follow the news links to the Equifax page, which in turn link to a shady third-party website asking for 2/3 of one 's social security number plus last name and a waiver of all class action recourse in order to discover if one is among the breached accounts, only changed to waive class action recourse from the third party site if it too is breached with the sensitive data it is querying once the news of this spread. This is insufficient to the need created by their negligent protection of my information, which I did not give them myself, but which they curated as their business from other businesses.
In order to address this, I suggested : 1. Unlimited free credit freezes and unfreezes for life for all identified as being a victim of the breach in order to keep our credit accounts appropriately locked down, which is the time frame we are now at risk for identity fraud 2. Reimbursement for 3-bureau credit monitoring of my choosing for life up to a reasonable fee amount, including pulling my own report at any time with no charge and without any credit penalties 3. Support to proactively resolve any breaches identified on my accounts in perpetuity, which if necessary can be used by my heirs who might be dealing with a breached account following my XXXX 4. Guidance on who to proactively reach out to and what can be done to protect myself from identity fraud in the future ( for example, setting up a newly unique security question and answer at all banks, doctors, dentists, political representatives, and places I have my credit card or other personal info on file ) along with case management assistance for accomplishing this if I request it 5. Commitment for leading the industry to using 2-factor authentication at the point of service in the near future ( such as by 2020 ) 6. Reimbursement for any fees directly associated with addressing the breach and any aftermath of it, in perpetuity, which if necessary can be used by my heirs who might be dealing with a breached account following my XXXX 7. Correcting the security issue that allowed the breach 8. Due diligence to confirm that all affected are notified of the breach, it 's lifelong implications, and their options for support including through following up by letter, phone, and other resources as appropriate with any who do not opt-in or opt-out via notice through the news. Allowing easy opt-in at any time, not confined to a certain short period or burdensome process. 8. Thorough external audit for the security of all systems, databases, applications, processes, etc 9. Setting up a process by which people may opt themselves out of the company 's services and/or submit their own information directly to the company. Perhaps a separate database of people who are not placed on an external server could be kept for those who make this opt-out request.