Consumer complaint received 2024-11-26 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: Experian Information Solutions Inc.
State: FL

Complaint narrative:
Subject : Dispute of Inaccurate Reporting and Violation of Federal Rights To Whom It May Concern, I, XXXX XXXX, am writing this letter to formally dispute the inaccurate reporting of certain information on my credit report related to a recent event involving Change Healthcare, a subsidiary of XXXX XXXX ( XXXX ), and its reported cybersecurity incident. This incident has affected the accuracy of the data listed in my credit report and may also represent a violation of my federal rights under the Health Insurance Portability and Accountability Act ( HIPAA ) and the Fair Credit Reporting Act ( FCRA ). 

Inaccurate Reporting : It has come to my attention that there is an inaccurate reporting of my personal health information due to the breach of protected health information ( PHI ) by XXXX XXXX. The breach, which was reported to the U.S. Department of Health and Human Services ( HHS ) Office for Civil Rights ( OCR ), has been confirmed to involve personal and medical data of individuals, including myself, without my authorization. While XXXX XXXX filed a breach report to the XXXX, the information about my personal involvement in this breach is incorrect. 

I am requesting that the information about this incident be thoroughly reviewed and corrected on my credit report. 

Violation of Federal Rights : As per the Health Insurance Portability and Accountability Act ( HIPAA ), I have the right to privacy regarding my protected health information, and I must be notified if any breach occurs. The mishandling of my data as a result of the reported breach has led to erroneous credit reporting, which I believe is in direct violation of the following federal laws, specifically under Title 42 of the U.S. Code ( U.S.C. ) : Health Insurance Portability and Accountability Act ( HIPAA ) - 42 U.S.C. 1320d et seq. : This law mandates the protection of my personal health information and ensures that any breaches are properly addressed, including notifying individuals affected by unauthorized access to their data. The reported breach is a violation of HIPAA regulations under 42 U.S.C. 1320d-6 ( Criminal penalties for violations of HIPAA ) and 42 U.S.C. 1320d-2 ( Administrative Simplification ), which govern the security and breach notification requirements for covered entities.

Fair Credit Reporting Act ( FCRA ) - 15 U.S.C. 1681 et seq. : Under the FCRA, I have the right to dispute any inaccurate or incomplete information in my credit report. Section 1681i of the FCRA requires that upon receipt of a dispute, the credit reporting agency must investigate the information in question, correct any inaccuracies, and notify me of the resolution. The inaccurate information resulting from this breach is adversely affecting my credit report, and I request its correction or removal in compliance with this statute.

Fair and Accurate Credit Transactions Act ( FACTA ) - 15 U.S.C. 1681c-2 : FACTA amends the FCRA to provide additional protections, including the correction of credit report errors resulting from identity theft, fraud, or unauthorized use of personal data. Given that the breach of my health data may involve fraud or misuse of my personal information, I am invoking my rights under 15 U.S.C. 1681c-2 to request the removal of any related items from my credit report.

Request for Action : Based on the above, I respectfully request that the following actions be taken : A thorough investigation into the accuracy of the data on my credit report in relation to the XXXX XXXX breach. 
Immediate removal or correction of any inaccurate information pertaining to this breach.

Confirmation in writing that my credit report has been corrected to reflect accurate information in accordance with HIPAA, FCRA, and FACTA.

I trust that this matter will be resolved promptly and that my rights under federal law will be upheld. If additional information is required, please feel free to contact me at XXXX Please delete from XXXX, XXXX, and Experian times and dates are inaccurrate. 

XXXX XXXX Account XXXX XXXX credit card JPMCB CARD Account Number XXXX Account Type Credit card Account Info Account Name XXXX BANK XXXX XXXX. 
Account XXXX XXXX Credit card XXXX XXXX was reported incarrately and required to be removed for all three credit agenancies Thank you for your attention to this important matter. 

Sincerely, XXXX XXXX

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation