After New Reports of Stolen Data, U.S. PIRG To Congress: Stop Letting Equifax off the Hook

Instead, Follow the Lead of Several States

U.S. PIRG

Washington, D.C. – Today Equifax has reported the loss of information for an additional 2.4 million Americans, nearly six months after its massive data breach was first reported. This is yet another reason why U.S. PIRG is urging Congress to stop current efforts to let Equifax and the other credit bureaus off the hook for data breaches. It is also highlighting the work states are doing to fill the void left by Congress for protecting consumers.

“Why did it take Equifax so long to disclose this additional stolen information? And why is Congress working on a data breach notification bill that exempts Equifax, the other credit bureaus, and all banks?” asked Mike Litt, consumer campaign director with U.S. PIRG. “In addition to raising more questions over Equifax’s many failures, these new revelations of stolen information show the urgent need for action. But not action that would let Equifax off the hook or replace stronger state laws.”

The newly reported stolen information – names and partial driver’s license numbers – could be used to “phish” for even more personal information and to commit identity theft. Consumers should beware fraudulent emails and phone calls asking to verify their personal or financial information.

Several states are taking decisive action to give consumers control of their credit reports to prevent identity theft, by moving free credit freeze laws toward final passage. Meanwhile, Congress is likely to soon consider a bill that requires merchants, telecoms and some others to notify the public when they are hacked but continues to exempt Equifax, other credit bureaus and all banks from such breach notification. The draft bill also preempts, or overrides, stronger state data security or breach notice laws.

States working on pro-consumer privacy & data security bills include:

• Washington – A PIRG-backed free freeze bill is on its way to Gov. Jay Inslee’s desk.

• Illinois – Despite a letter from the trade association representing Equifax and other credit bureaus claiming that a free freeze for any consumer not yet a victim of identity theft “is a free freeze too far,” a bill backed by the AG is on its way to a vote by the Senate.

• Massachusetts – A bill that makes freezes free and includes other important consumer protections, such as seeking consent from a consumer before his or her credit report is obtained and requiring encryption of personal information for entities with access to information of large numbers of people, has passed the House and heads to the Senate.

• In Oregon, a data breach notification and free freeze bill heads to the House after passing the Senate.

• Legislative progress on free freezes has also been made in other states, including California, Colorado, Florida, and Maryland.  

“Instead of moving on legislation that would let Equifax off the hook, Congress should follow the lead of many states and give consumers more control over their financial information,” Litt said.

-30-

Our step-by-step guide for placing credit freezes with all three bureaus is available here. FAQs about the Equifax data breach are available here.

U.S. PIRG is the federation of state Public Interest Research Groups.  PIRGs are non-profit, non-partisan public interest advocacy organizations that stand up to powerful interests whenever they threaten our health and safety, our financial security, or our right to fully participate in our democratic society. On the web at www.uspirg.org.