Consumer complaint received 2025-12-03 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Credit inquiries on your report that you don't recognize
Company: Experian Information Solutions Inc.
State: CA

Complaint narrative:
I am filing this complaint as a direct result of my personal information being compromised in a confirmed data breach. Due to this breach, I am now a victim of potential identity theft and unauthorized use of my personal and financial information. I have reason to believe that the accounts and/or items currently reporting on my credit file are the result of this data breach and are unverifiable, inaccurate, and incomplete under the Fair Credit Reporting Act ( FCRA ) and the Fair Debt Collection Practices Act ( FDCPA ). 

Under FCRA 602 ( A ) and 607 ( b ), credit reporting agencies are required to maintain reasonable procedures to ensure the maximum possible accuracy of the information they report. Any item that can not be verified beyond a reasonable doubt must be promptly deleted. Because my data was compromised, the accuracy and legitimacy of these reported debts are now disputed and legally questionable. 

Additionally, FCRA 611 ( a ) provides that a consumer reporting agency must complete reinvestigations within 30 days ( or 45 if extended with consumer consent ). Given that I am a confirmed data breach victim, this should be treated as a priority identity theft dispute under FCRA 605B, requiring deletion or blocking of disputed information within 4 business days if the information can not be verified as accurate.

Under FDCPA 807 ( 8 ) and 809 ( b ), debt collectors are prohibited from reporting information they know or should know is false or unverifiable, and must cease collection activity until they have provided proper validation of the alleged debt. Because my personal information was exposed in a data breach, no collector can claim legitimate ownership or validation of this debt without documented proof beyond a reasonable doubt. 

I am requesting the Consumer Financial Protection Bureau to investigate this matter fully and to ensure compliance with the following consumer protection laws : FCRA 602 ( A ) Reasonable procedures to assure maximum accuracy FCRA 605B Blocking of information resulting from identity theft FCRA 611 ( a ) Right to dispute and timely reinvestigation ( 3045 days ) FCRA 607 ( b ) Requirement of accurate reporting and verification FDCPA 807 ( 8 ) Prohibition on communicating false credit information FDCPA 809 ( b ) Debt validation requirements before further reporting or collection 15 U.S.C. 1681i ( a ) Reinvestigation of disputed information 15 U.S.C. 1681s-2 ( b ) Duty of furnishers to investigate disputed information Because these accounts are the result of a confirmed data breach, I demand immediate investigation and deletion within 90 days or less, pursuant to the above laws. If the furnishers and credit bureaus can not verify the debt with documented proof of my signature, application, or consent, the information must be permanently deleted to remain in compliance with the FCRA and FDCPA. 

Attached are supporting documents verifying that I was affected by a data breach ( e.g., notice letter, FTC Identity Theft Report, or other documentation ). 

Please ensure this complaint is reviewed, escalated, and addressed promptly to prevent further harm or re-reporting of unverifiable information.

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation