Consumer complaint received 2025-05-12 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: EQUIFAX, INC.
State: FL

Complaint narrative:
A " data breach '' is when an unauthorized person illegally accesses your confidential, personal, or protected information. Exactly what is considered personal information depends on state law but usually includes your full name along with one or more of the following pieces of information : your Social Security number your driver 's license number or state-issued identification card number a credit or debit card number or an account number, including, in some cases, a security code, access code, password, or personal identification number ( PIN ) your email address and password, or your medical or biometric information.

Why Hackers Want Your Personal Information Hackers often use stolen personal data for identity theft. With your personal information, a hacker can get new credit cards under your name ( or use ones you already have ), apply for loans in your name, or commit other kinds of financial fraud.

They can also impersonate you online, apply for government benefits, or file taxes and get a refund in your name. In some cases, a hacker might use your personal information to blackmail you.

Massive Data Breach Puts 2.9 Billion Records, Including Social Security Numbers, on the Dark Web In XX/XX/XXXX, it was revealed that 2.9 billion records, including Social Security numbers, names, addresses, email addresses, and phone numbers, were illegally accessed in a data breach of XXXX XXXX XXXX ( a consumer data aggregator that assists companies in performing background checks ). The company has confirmed that hackers stole encrypted information and have released most of it on the dark web. This breach is one of the largest, if not the largest, data hack ever. 

The cybersecurity firm XXXX said it obtained the data and created a tool you can use to determine if your information was included in the breach. If your information was stolen, be sure to put a credit freeze ( see below ) on your files with all three credit reporting bureausEquifax, Experian, and Transunion. You should also monitor your financial accounts for unusual activity, use two-factor authentication, be wary of unexpected communications, and update your passwords. 

If you think an identity thief is using your confidential information, go to the Federal Trade Commission 's IdentityTheft.gov website and get a personal recovery plan.

Legal Obligations of Businesses to Protect Customer Data In the United States, federal and state laws govern how companies must protect personal data. 

Federal Laws Covering Data Breaches A few of the federal laws covering this area include : The Gramm-Leach-Bliley Act, which protects your personal financial information. 
The Fair Credit Reporting Act ( FCRA ), which governs credit data and regulates how information in your credit reports can be used and accessed. 
The Health Insurance Portability and Accountability Act ( HIPAA ), which protects private health information.

The U.S. Privacy Act of 1974, which governs the collection, maintenance, use, and dissemination of information about individuals that federal agencies keep in their records.

The Federal Trade Commission Act, which requires that companies making privacy promises ( expressly or by implication ) comply with to those claims State Data Breach Laws All 50 states and the District of Columbia have data breach laws to protect consumers. These laws generally require organizations to notify you if a data breach involving specific personal identifying information happens. ( Some states also require companies to notify the state attorney general or a state agency after a breach. ) To get a summary of these notification laws, go to the XXXX XXXX XXXX XXXX XXXX website.

Company response to consumer: Closed with explanation