Consumer complaint received 2025-10-17 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Credit inquiries on your report that you don't recognize
Company: Experian Information Solutions Inc.
State: NY

Complaint narrative:
I am submitting this complaint to formally report that I was affected by a verified data breach, which exposed my personally identifiable information ( PII ), including sensitive financial data that may have been used to fraudulently open or report accounts under my name. As a result, I have reason to believe that certain accounts and derogatory items currently appearing on my credit profile may be inaccurate, unverifiable, or the result of identity theft stemming from this breach.

Under the Fair Credit Reporting Act ( FCRA ), 15 U.S.C. 1681 et seq., and the Fair Debt Collection Practices Act ( FDCPA ), 15 U.S.C. 1692 et seq., I am exercising my full rights as a consumer to have all accounts that can not be verified through proper documentation deleted immediately and for my credit profile to be updated and corrected within the statutory timeframe.

Specifically : FCRA 602 ( A ), 603, 611 ( 15 U.S.C. 1681, 1681a, 1681i ) : grants me the right to dispute any information I believe to be inaccurate or unverifiable and requires that the credit reporting agencies and furnishers of information conduct a reasonable reinvestigation. If they can not verify the accuracy of the item, it must be deleted within 3045 days.

FCRA 605B ( 15 U.S.C. 1681c2 ) : provides that in cases involving identity theft or data breaches, the credit bureaus must block the reporting of information resulting from such activity within 4 business days of receiving notice and proper documentation.

FDCPA 807 ( 8 ) ( 15 U.S.C. 1692e ( 8 ) ) : prohibits debt collectors from communicating or reporting information to credit bureaus that they knowor should knowis false, including debts resulting from identity theft or unauthorized use.

FDCPA 809 ( b ) ( 15 U.S.C. 1692g ( b ) ) : requires that if a consumer disputes a debt in writing, all collection activity must cease until verification
of the debt is provided.

FCRA 623 ( a ) ( 1 ) ( A ) : mandates that furnishers of information may not report data they know or have reasonable cause to believe is inaccurate. 

Given that I have been a victim of a data breach, any debts, accounts, or negative marks that can not be fully validated through original signed contracts, account applications, or transaction histories must be deleted in accordance with the above laws. 
I am requesting that the Consumer Financial Protection Bureau ( CFPB ) investigate these violations and ensure that the reporting agencies and furnishers comply with federal law by completing all reinvestigations and necessary deletions within 90 days or less. 

I am also requesting that each party involved provide written confirmation of all actions taken, including : Proof of verification for each disputed item ( if available ), or Written notice of deletion if verification can not be established.

Failure to comply with these federal laws constitutes a violation of my consumer rights under the FCRA and FDCPA, and will be subject to further legal remedy. 

I am demanding immediate reinvestigation, verification, or deletion of all disputed items, as the accounts in question may be fraudulent or unverifiable due to the data breach exposure.

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation