Consumer complaint received 2024-11-01
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: EQUIFAX, INC. (SC)

I am writing to formally express my serious concerns over the recent and recurring data breaches involving Equifax and XXXX XXXX. The repeated and reckless exposure of sensitive consumer data by these companies has put countless consumers, including myself, at risk. As an agency tasked with the protection of consumer rights, the CFPB must take decisive and robust action against these entities, who appear to have demonstrated gross negligence in safeguarding consumer information. 

The XXXX Equifax breach exposed sensitive personal information, including Social Security numbers, birth dates, and addresses, affecting approximately 147 million XXXXXXXX. XXXX XXXX XXXXXXXX data breach was equally egregious, compromising the personal data of over 100 million individuals. These companies continue to operate under weak cybersecurity protocols that are clearly insufficient to protect sensitive consumer information. This type of negligence and lack of accountability is unacceptable.

Under 15 U.S. Code 1681c-2 ( Section 605B of the Fair Credit Reporting Act ), consumers have the right to request that credit reporting agencies block fraudulent information that arises as a result of identity theft. I am formally demanding that the CFPB : Investigate and Enforce : Conduct a thorough investigation into the security practices of Equifax and XXXX XXXX. Consumers have a right to know how their data is being managed and that the CFPB will hold these corporations accountable for their reckless data protection practices. 

Enhance Regulatory Standards : Update and strengthen cybersecurity standards for credit reporting agencies and financial institutions. Current standards are clearly insufficient to protect consumers from identity theft and fraud resulting from breaches.

Impose Sanctions and Compensate Consumers : Issue significant penalties to these companies for each incident of data exposure and ensure that affected consumers are compensated accordingly. Any fines imposed should be substantial enough to discourage further data negligence.

Strengthen Consumer Rights and Protections Under U.S. Code 1681c-2 : Provide more accessible and clear instructions to consumers on how to block fraudulent information on credit reports and consider expanding these protections to address instances of data exposure due to company negligence.

Consumers deserve to feel safe and secure in their financial dealings, free from the fear of breaches due to corporate malpractice. Without swift and punitive action by the CFPB, consumers will continue to suffer while companies profit at the expense of our security and privacy. The CFPB has both the mandate and responsibility to protect consumers, and we expect nothing less than your commitment to upholding that responsibility.

Please confirm receipt of this letter and inform me of the specific actions the CFPB will be taking in response to these critical issues. I await your immediate attention and resolution to this matter.