Skip to main content
W
External Link
There’s good account security, and then there’s this.

Cybersecurity blogger Brian Krebs wrote today — a little over a year from his 2022 article describing the same issue — that anyone can usurp someone else’s Experian credit account simply by creating a new account.

He described what happens after you do so, based on his own experience regaining his own stolen Experian account:

After that, your new account is created and you’re directed to the Experian dashboard, which allows you to view your full credit file, and freeze or unfreeze it.

At this point, Experian will send a message to the old email address tied to the account, saying certain aspects of the user profile have changed. But this message isn’t a request seeking verification: It’s just a notification from Experian that the account’s user data has changed, and the original user is offered zero recourse here other than to a click a link to log in at Experian.com.