Consumer complaint received 2024-09-13
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Problem with fraud alerts or security freezes — 
Company: EQUIFAX, INC. (NE)

I am writing to formally request that the Consumer Financial Protection Bureau ( CFPB ) require XXXX, Equifax, and XXXX to immediately remove all inaccurate and unauthorized information, including addresses and accounts, from my credit reports. This request is based on multiple violations of my rights under the Fair Credit Reporting Act ( FCRA ) ( 15 U.S.C. 1681 et seq. ), the Fair Debt Collection Practices Act ( FDCPA ) ( 15 U.S.C. 1692 ( g ) ), and other data security laws.

Summary of Violations and Demands : 1. Failure to Block Information Resulting from Identity Theft : As a victim of identity theft, I have identified specific information on my credit report that has resulted from this theft. Under 15 U.S. Code 1681c-2, a consumer reporting agency is required to block the reporting of any information in the file of a consumer that the consumer identifies as resulting from identity theft no later than 4 business days after receipt of the consumers request. It has been 30 days since I made such a request, and the consumer reporting agencies have failed to comply, placing them in violation of this law. 
Immediate Action Required : I demand the deletion of all items associated with identity theft from my credit report immediately.

2. Violation of Permissible Purpose Requirements : Under 15 U.S. Code 1681b ( a ) ( 2 ), a consumer reporting agency may only furnish a consumer report in accordance with the written instructions of the consumer to whom it relates. I have never provided any consumer reporting agency with written consent to report any information on my consumer report. The unauthorized reporting of any information constitutes a violation of my rights as a federally protected consumer.

No Consent Equals Identity Theft : The reporting of these items without my consent is equivalent to identity theft. As such, I am demanding the immediate deletion of the accounts listed.

3. Exposure of Personal Information in a Data Breach : My personal information, including addresses, was exposed in a data breach. Under 15 U.S. Code 1681 ( b ), consumer reporting agencies must protect consumer information and ensure it is only used for permissible purposes. The exposure of my information due to inadequate data security measures violates the agencies obligations under this statute and under 15 U.S. Code 6801 of the Gramm-Leach-Bliley Act ( GLBA ), which requires institutions to protect the privacy and confidentiality of consumer information.

Additional Violations : Failure to Remove Inaccurate and Unverified Information : According to 15 U.S. Code 1681i ( a ) ( 5
), consumer reporting agencies are obligated to remove inaccurate or unverified information promptly upon a consumers dispute. Despite my formal dispute, these inaccurate items remain, further violating 15 U.S. Code 1681e ( b ), which mandates the maintenance of maximum possible accuracy.

Increased Risk of Identity Theft and Financial Harm : The inclusion of unauthorized and inaccurate addresses, combined with the data breach, significantly heightens my risk of identity theft and fraud, adversely affecting my creditworthiness.