Skip to main content

How to freeze your credit after a data breach

How to freeze your credit after a data breach

/

Or before

Share this story

If you buy something from a Verge link, Vox Media may earn a commission. See our ethics statement.

Federal Government Grants American Express Bank Holding Status
Photo by Justin Sullivan/Getty Images

Yesterday, Equifax announced that hackers stole half of the US population's Social Security numbers in what will likely end up being one of the worst data breaches to ever affect the country. If you're one of the victims, you might consider freezing your credit. Here's information on how to do that, and what it entails.

How do I know if my data was stolen from Equifax?

Equifax built a website for the data breach where you can type in your name and the last six digits of your Social Security number to figure out whether your information was compromised. Now, there's been some talk about the website's Terms of Service. Some people have speculated that using the website could waive your right to join a class action suit. This isn't clear yet.

What's a credit freeze?

A credit freeze prevents creditors from viewing your credit file. Whenever you apply for a credit card, loan, mortgage, or even just to rent an apartment, the bank or landlord evaluates your credit and the risk of approving you. A freeze blocks them from retrieving your credit information, thereby blocking an attacker from taking out new credit in your name. 

Couldn't an attacker lift my freeze and open a new line of credit?

You'll have to use a PIN to lift the freeze. So unless the attacker knows that PIN, they won't be able to get around your freeze.

How do I place a freeze?

The bad news is that you'll have to reach out to each credit reporting company independently. There are three main companies in the US: Equifax, Experian, and TransUnion. There's also a smaller company called Innovis. Prices per freeze vary depending on where you live, but often times, you can get these freezes for free if you prove you're a victim of identity theft. Here are the contact numbers for each company, as well as backlinks to their dedicated freeze landing pages.

Does this mean I won't be able to rent an apartment, take out a new credit card, or get a loan?

No, you'll just have to temporarily lift your freeze, and the approval process might be delayed. If you can find out which credit reporting company your potential landlord or bank uses, you can lift it only for that company. This won't affect your credit score, and it won't prevent you from receiving a credit report. You can also keep using your same credit cards, although if you think they might have been compromised, you should get new ones.

When should I put this freeze on my account?

You're probably here because you think your data has been compromised. You should try to do this as soon as possible. Even if you've happened here by accident, you might consider putting this freeze on your accounts as a safety precaution because really, there's no telling whether your data is out there. Equifax waited over a month to inform consumers, and there's no national data breach law in place requiring companies to inform people of leaks within a certain time frame. This can at least give you some peace of mind.

When should I unfreeze my credit?

Like I mentioned above, it's fairly easy to lift your freeze in the event that you want to open a new credit card or rent a new apartment (or do anything else involving your credit). Just realize it might take a few days to get it off, so make sure you give your creditor a heads up. Every company must lift your freeze no later than three business days after getting your request. 

Update 9/8, 3:13 PM ET: A previous version of this article suggested calling Equifax's phone line to avoid its online portal and its Terms of Service. It turns out that calling that number only results in a person suggesting you log onto the website. We've since removed that advice.