Experian Bug Exposed Security Pins That Shielded Credit Reports
This post contains references to products from one or more of our advertisers. We may receive compensation when you click on links to those products. Terms apply to the offers listed on this page. For an explanation of our Advertising Policy, visit this page.
After a wild year of Equifax recovering from its massive data breach, which exposed personal information of millions of Americans, a new credit reporting bureau is in hot water.
A report by NerdWallet has revealed a serious flaw in Experian’s security system, which was supposed to protect the pins of customers who wanted to unfreeze their credit reports.
Experian explains what a credit freeze is on its website, but issues in its own system allow criminals to do exactly what the company says a credit freeze is supposed to prevent in the first place:
“A security freeze will prevent potential lenders from accessing your credit report, stopping a thief from opening an account or getting credit—even if they have your personal information,” Experian writes.
Experian’s system issued consumers a PIN to access their frozen credit reports. However, if a consumer forgot their pin and wanted to retrieve it, they had to answer a set of security questions. Anyone could potentially access your report because Experian would accept a blanket “None of the above” answer to these questions.
Once someone had access to an account they could unfreeze the credit report and start to open credit cards in customers’ names — pending other personal details like social security number and date of birth.
“This means that even if you had taken the step to freeze your Experian credit report, an identity thief could have unfrozen it and still tried to open a credit account in your name,” Mike Litt, a director for consumer group PIRG, told Yahoo Finance.
Experian confirmed the loophole did exist.
“While we are confident that our authentication is secure and no credit files are at risk, we have taken additional steps to make the process more secure,” Experian said in a statement. “We continue to regularly monitor our systems, taking immediate action when warranted to strengthen data security.”
Many consumers took advantage of credit freezes in the wake of the Equifax breach in hopes of protecting their identity and credit score. The Equifax breach exposed more than 148 million Americans’ personal data including their social security number, address and more.
Since a credit freeze may not even protect your information it’s important to routinely check your credit report to ensure that no new accounts have been opened in your name. A slew of banks like Chase, Citi and Capital One allow you to check your credit score for free through their websites.
Featured image by i_frontier / Getty Images.
Welcome to The Points Guy!
Earn 90,000 bonus miles and 10,000 Medallion® Qualification Miles (MQMs) after you spend $3,000 in purchases on your new card in the first three months of card membership. Offer ends 11/10/2021.
With Status Boost™, earn 10,000 Medallion Qualification Miles (MQMs) after you spend $25,000 in purchases on your Card in a calendar year, up to two times per year getting you closer to Medallion Status. Earn 3X Miles on Delta purchases and purchases made directly with hotels, 2X Miles at restaurants and at U.S. supermarkets and earn 1X Mile on all other eligible purchases. Terms Apply.
- Limited Time Offer: Earn 90,000 Bonus Miles and 10,000 Medallion® Qualification Miles (MQMs) after you spend $3,000 in purchases on your new Card in your first 3 months. Offer expires 11/10/2021.
- Earn up to 20,000 Medallion® Qualification Miles (MQMs) with Status Boost® per year. After you spend $25,000 in purchases on your Card in a calendar year, you can earn 10,000 MQMs two times per year, getting you closer to Medallion® Status. MQMs are used to determine Medallion® Status and are different than miles you earn toward flights.
- Earn 3X Miles on Delta purchases and purchases made directly with hotels.
- Earn 2X Miles at restaurants worldwide, including takeout and delivery and at U.S. supermarkets.
- Earn 1X Miles on all other eligible purchases.
- Receive a Domestic Main Cabin round-trip companion certificate each year upon renewal of your Card. *Payment of the government imposed taxes and fees of no more than $75 for roundtrip domestic flights (for itineraries with up to four flight segments) is required. Baggage charges and other restrictions apply. See terms and conditions for details.
- Enjoy your first checked bag free on Delta flights.
- Fee Credit for Global Entry or TSA Pre✓®.
- Enjoy an exclusive rate of $39 per person per visit to enter the Delta Sky Club® for you and up to two guests when traveling on a Delta flight.
- No Foreign Transaction Fees.
- $250 Annual Fee.
- Terms Apply.
- See Rates & Fees