ALERT: FTC recommends consumers consider security freezes with credit reporting agencies following Equifax breach

The Federal Trade Commission has released guidance to help consumers whose information was compromised in the recent Equifax data breach learn more about protecting themselves. The Sept. 7 breach, which exposed individuals’ Social Security numbers, account numbers and drivers’ license numbers, put many at risk of identity theft. As a result, the company is offering free credit freezes, which block access to a person’s credit information, until Nov. 21. Those who had already paid for such a freeze before Equifax’s offer will receive refunds. However, to effectively help protect against identity theft, consumers must place freezes with all three major credit reporting agencies – Equifax, Transunion and Experian. Transunion and Experian charge for credit freezes, and for all three agencies, the typical cost is about $5 - $10 every time an account is frozen or unfrozen. Each agency must be contacted individually to freeze or unfreeze an account.

What are credit freezes and fraud alerts?

A credit freeze is a freeze on all access to a person’s credit information. This means that no one – including the consumer – can access the credit report to open new accounts or issue credit unless the consumer unfreezes the account. In most states, this freeze lasts until the person temporarily or permanently removes it. In some states, the freeze expires after seven years. This may be a good option for those who aren’t planning to seek new credit anytime soon; otherwise, the cost and inconvenience of having to freeze, unfreeze, and refreeze credit report accounts may be too much.

Another option is for consumers to place a fraud alert on their credit reports. When a fraud alert is placed, lenders and creditors must attempt to verify a consumer’s identification before they extend new credit. For fraud alerts, consumers need to contact only one of the major credit agencies, as each is required to notify the other two to place an alert on the file. Fraud alerts are free; however, they expire after 90 days unless they are renewed by the consumer.

Need more information?

To review the FTC’s full alerts, click here and here. To set up a credit freeze or fraud alert, contact Equifax, Transunion, or Experian directly. If you are concerned about managing your personal or your organization’s cybersecurity risk, please contact Brian Johnson, AGH’s senior vice president of technology services, using the information below.

Call us Email us Connect with us

Brian Johnson

Senior Vice President
Technology Services

Brian joined AGH in 1992. He leads the firm’s technology services practice where he helps clients achieve measurable performance improvements through the delivery of specialized, competency-based information systems management, assurance, and advisory services. He has extensive experience in information security, network engineering, and solution development, with recognized specializations in governance, risk, control, and related consulting services.

Brian is a member of ISACA (previously known as the Information Systems Audit and Control Association), the Kansas Society of Certified Public Accountants (KSCPA), the American Institute of Certified Public Accountants (AICPA), the AICPA’s Information Management and Technology Assurance (IMTA) Section, and the Association for Supply Chain Management (ASCM). He is a Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT), Certified in Risk and Information Systems Control (CRISC), Certified Data Privacy Solutions Engineer (CDPSE), and Certified in Production and Inventory Management (CPIM).

Brian is also a Certified Public Accountant (CPA) and a graduate of Wichita State University, where he earned Master of Accountancy and Bachelor of Business Administration degrees.