Color of Money: After the Equifax massive data breach, so many questions

Michelle Singletary on

Equifax: "Due to the number of consumers who have requested enrollment in the TrustedID Premier product, we are experiencing periodic delays in issuing confirmation emails. We assure you we are working diligently to send confirmation information as quickly as possible, and apologize to the consumers who have not yet received their confirmation emails."

Another reader asked: "We had a 'freeze' in place at Equifax, TransUnion and Experian at the reported time of the Equifax breach. Did the hackers obtain our PIN and therefore invalidate our freeze?"

Equifax: "A consumer who had a freeze on their Equifax credit report may be part of the impacted population. However, because a credit freeze allows consumers to restrict access to their credit reports, it is difficult for potentially impacted information to be used inappropriately if a consumer had a freeze in place. It is also important to note that the incident did not impact Equifax's core consumer credit database, which is where a freeze is applied. Therefore, a consumer does not need to refreeze their credit report, as the freeze continues to be in place until the consumer removes it."

A reader named Marvin, like so many others, wondered why he's been having so much trouble placing a freeze on his file.

Equifax: We have "completed an upgrade to our [interactive-voice response] application processor and we are expanding the server capacity to enable more calls to come through. We are also expanding the number of lines into the system with our telephone carrier."

Lois Ambash from Needham, Massachusetts, wrote, "I've read that if I accept the services offered by Equifax in the wake of the breach, I will be forfeiting my right to sue, even as part of a class action. Is this true? My state Attorney General, Maura Healy, has filed suit against Equifax on behalf of all residents. If the suit is successful, I don't know how I would be affected."

Equifax backed off from forcing people to agree to mandatory arbitration, writing in a statement: "Because of consumer concern, the company clarified that [arbitration and class-action waiver] clauses do not apply to this cybersecurity incident or to the complimentary TrustedID Premier offering. The company clarified that the clauses will not apply to consumers who signed up before the language was removed."

Finally, Renee of Annapolis, Maryland, asked me, given Equifax's security issues, if I was concerned about having to enter the last six digits of my Social Security number during the registration process for TrustedID Premier.

Sure, I'm worried. But there's a lot I need to do to protect my financial information. So I've decided that it's worth the risk to take up Equifax on its free offer to help.


Readers can write to Michelle Singletary c/o The Washington Post, 1301 K St., N.W., Washington, D.C. 20071. Her email address is Follow her on Twitter (@SingletaryM) or Facebook ( Comments and questions are welcome, but due to the volume of mail, personal responses may not be possible. Please also note comments or questions may be used in a future column, with the writer's name, unless a specific request to do otherwise is indicated.

(c) 2017, Washington Post Writers Group



blog comments powered by Disqus

Social Connections


For Heaven's Sake Baby Blues Heathcliff Steve Benson Clay Bennett DeFlocked