Independent Reporting · Not Legal or Security Advice · Verify With the Breached Company · Editorial Policy

Cybersecurity — Equifax Breach FAQ: Notifications, Rights, and Protection

The Equifax breach exposed personal data of approximately 147 million Americans between May and July 2017, with the breach disclosed publicly on September 7, 2017. This was one of the largest data breaches affecting consumer financial information, and Equifax—one of the three major U.S.

credit reporting agencies—remains liable for settlement obligations and free protections available to affected individuals. The breach triggered a major settlement with federal regulators and resulted in multiple ways for affected consumers to receive compensation, free credit monitoring, and identity-theft protection services. This guide addresses common questions about notifications, eligibility, compensation deadlines, and protective steps you can take today.

Table of Contents

What Personal Information Was Exposed?

The compromised data included names, Social Security numbers, birth dates, home addresses, driver's license numbers, and credit card details for a subset of affected individuals. Not every victim had every type of data exposed—credit card information was compromised for only some people—but Social Security numbers and birth dates were the most widespread exposures because Equifax uses these as core identifiers for credit reports. This combination of data made affected individuals vulnerable to identity theft, fraudulent loan applications, and tax fraud. The exposure window lasted approximately three months before Equifax discovered the breach, meaning criminals may have had extended access to build profiles on millions of people.

How Did Equifax Notify Affected Consumers?

Equifax notified affected consumers through a dedicated website (equifaxsecurity2017.com), mail notification letters, and a phone call center established in September 2017. If you were affected, you should have received notification through at least one of these channels between September 2017 and early 2018. If you're unsure whether you were affected, you can check your eligibility using the settlement lookup tool by providing your last name and the last six digits of your Social Security number. The tool will confirm whether your data was part of the exposed dataset.

What Compensation and Services Are Available Now?

The global settlement with the FTC, CFPB, and 50 states and territories resulted in at least $575 million in restitution, potentially reaching $700 million. Affected individuals who filed claims by the January 22, 2024 deadline could receive cash payments of $125 or up to $20,000 for documented losses (calculated at $25 per hour for time spent addressing the breach, up to 20 hours). That compensation deadline has passed, but free identity-restoration services remain available through January 2029, regardless of whether you filed a formal claim. These services help you recover from identity theft if it occurs, including assistance with contacting creditors, credit bureaus, and law enforcement. Affected individuals are eligible for up to 10 years of free credit monitoring through TrustedID Premier and seven years of identity-restoration services. You do not need to have filed a compensation claim to access these services—enrollment is automatic or available through the settlement website.

What Are Your Credit Monitoring Options?

All U.S. consumers can obtain seven free Equifax credit reports annually through 2026 via annualcreditreport.com, regardless of whether they were affected by the breach. This right was expanded as part of the settlement and provides you with direct visibility into what Equifax is reporting about you.

Affected individuals receive the TrustedID Premier service at no charge for 10 years, which includes continuous credit monitoring alerts, identity-theft insurance, and restoration assistance. If you enrolled after the initial notification period, you can still access this benefit through the settlement website.

How Can You Protect Yourself After the Breach?

Free credit freezes and security freezes are available to affected consumers; placing a freeze prevents credit bureaus from issuing new credit reports to potential creditors without your explicit permission. A freeze stops unauthorized people from opening accounts in your name and blocks fraudulent credit inquiries.

You can place a freeze with all three credit bureaus (Equifax, Experian, and TransUnion) for free, at any time, and it remains in place until you lift it. Review your credit reports regularly using your free annual reports to catch fraudulent accounts or inquiries. If you notice suspicious activity, dispute it with the credit bureau and file a report with the Federal Trade Commission.

Frequently Asked Questions

What if I didn't receive a notification letter from Equifax?

Contact the settlement website or call the Equifax support line to confirm your breach status using the lookup tool. Notifications were sent over several years, and some may have been delayed or misrouted.

Can I still get compensation for time spent dealing with the breach?

The compensation claim deadline was January 22, 2024, and claims filed after that date are not eligible. However, free identity-restoration services remain available through 2029.

How long does the free credit monitoring last?

TrustedID Premier credit monitoring is available for 10 years from enrollment. The free annual credit reports through annualcreditreport.com are available through 2026.

Does placing a credit freeze hurt my credit score?

No. A credit freeze does not affect your credit score and can be lifted temporarily when you apply for credit by contacting the bureau.


You Might Also Like

Owed money from a settlement? Check what is open at OpenClassActions.com. Caring for someone with dementia? Find practical guides at HelpDementia.com. Working out a skin routine? Evidence-based answers at AcneAdvocate.com. Forgot the name of a movie? Identify it at FindThisMovie.com.

We use cookies to run this site, measure how it’s used, and show ads. Choose “Essentials only” to limit cookies to what the site needs to work. Privacy Policy. Cookie Policy.