Consumer complaint received 2025-08-13 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Credit inquiries on your report that you don't recognize
Company: EQUIFAX, INC.
State: NY

Complaint narrative:
My credit reports from Experian, Equifax, and TransUnion are reporting multiple hard inquiries that I did not authorize, initiate, or consent to. These inquiries are the direct result of the XXXX data breach, which compromised my personal identifying information. The breach exposed sensitive data, including my Social Security number, date of birth, and other personal identifiers, allowing unknown parties to access my credit files without my knowledge or consent. 

I have never applied for credit with these companies, have no existing accounts with them, and did not give written, verbal, or electronic authorization for them to obtain my consumer report. Under the Fair Credit Reporting Act ( FCRA ), specifically 15 U.S.C. 1681b, a permissible purpose is required before a credit report may be accessed. These inquiries lack a permissible purpose and are therefore unlawful. 

After discovering the fraudulent inquiries, I submitted disputes to all three credit bureaus, providing an FTC Identity Theft Report, proof of my identity, proof of my current address, and documentation of the XXXX breach. Despite receiving this information, the credit bureaus failed to comply with their legal obligations under 15 U.S.C. 1681c-2 ( identity theft block ) to block the fraudulent inquiries within four business days. Instead, they continued to report these inquiries and failed to provide a meaningful explanation or verification.

The bureaus also failed to conduct a reasonable reinvestigation under 15 U.S.C. 1681i, instead verifying the inquiries without providing any Method of Verification as required by 1681i ( a ) ( 7 ). They did not disclose the name and contact information of the furnisher, the documents reviewed, or the procedures used to verify the alleged authorization. This parroting of data from furnishers without independent investigation does not meet the legal standard for a reasonable investigation. 

This continued reporting of fraudulent inquiries is causing significant harm to me by lowering my credit scores, damaging my creditworthiness, and creating the false impression that I am seeking excessive new credit. It is also affecting my ability to obtain credit on favorable terms, rent housing, and pursue other opportunities where my credit history is considered. 

I am requesting that the CFPB take immediate action to : Compel Experian, Equifax, and TransUnion to permanently delete all fraudulent inquiries associated with the XXXX breach. 

Ensure that the credit bureaus comply with their obligations under 1681c-2 to block identity theftrelated information within four business days.

Require that the bureaus provide a complete Method of Verification for any inquiry they intend to keep, including the original signed application or proof of authorization. 

Provide updated credit reports reflecting these deletions and written confirmation of all actions taken.

Company response to consumer: Closed with explanation