Half of the country is freaking out. That’s about how many people are potentially affected by the unprecedented Equifax hack. If you’re the average person who’s afraid of having your data stolen – and by data, we mean your name, Social Security number, birth date, addresses, credit card numbers, and driver’s license number that were reportedly involved in this breach – you may have already taken some steps to limit the damage. But what if you’re in the process of buying a home or are getting ready to do so? How does this hack affect you, and what can you do to make sure you are protected?
Potential fallout for homebuyers
“Take this scenario: Say your Equifax file was looted but you’ve done little or nothing to detect fraudulent activity on one or more of your credit accounts. You sign a contract to buy a house, and you apply for a mortgage. The lender pulls your credit and confronts you with shocking news: Your FICO credit score is too low for you to qualify for the loan because you’ve been running up too much debt on one or more accounts. Your ‘utilization ratio’ on your available credit is too high, and that has depressed your score,” said the Washington Post.
“Or there’s a newly established account in your files that has put you deep in debt, even though you had nothing to do with it. It turns out that financial thieves have been racking up thousands of dollars in debts at your expense, and now – smack in the middle of a major lifetime investment – you’re stuck with having to get the file corrected, which takes time and can be a pain. In the meantime, what happens to your purchase contract? Will the sellers bear with you, essentially putting off the transaction indefinitely and possibly blowing up their own plans to move into another house on a specific date? It could all get really messy.”
Those who are already in escrow could also be derailed when the lender runs your credit before the loan closes and discovers fraudulent new accounts or charges that raise the debt-to-income ratio beyond what is allowed. “At the very least, whatever rate locks you had could be blown as you scramble to get your files corrected,” they said. “Or your entire loan transaction could be jeopardized if the process takes too long.”
Steps to take now
Have you still not checked to see if you were potentially impacted by the hack that affected as many as 143 million people? Not having dealt directly with Equifax doesn’t guarantee your safety. “You may have never used Equifax yourself, or even heard of it,” said CNN. “Either way, the credit reporting agency could still have a lot of your personal information. To find out if your data was compromised by the hack, go here.”
Keep in mind that you’ll have to enter your last name and the last six numbers of your Social Security number to check. Regardless of whether or not they believe you were impacted, you’ll be prompted to enroll in their TrustID Premier credit monitoring service, which will be free for a year. Despite earlier concerns, “Equifax has confirmed that signing up for TrustID Premier will not prevent you from joining a class-action suit over this issue,” said PCWorld.
Armed with this information, you can go about taking further steps to protect your credit and prevent thieves from stealing your identity. Pull your credit reports for free once a year at www.annualcreditreport.com. Look them over carefully to make sure there are not any fraudulent accounts and/or charges. If you see anything, get on the phone with the creditor right away and start the dispute process. If you’re in the process of applying for a home loan or are under contract, you’ll also want to call your lender immediately to alert them to what you found.
To freeze or not to freeze
There has been quite a bit of discussion about credit freezes since news of the breach broke, with some consumers concerned that “turning off” their credit could potentially damage their score or negatively impact them in some other way, especially during the homebuying process. The fact is that a credit freeze is “the most extreme method, but it’s also the most effective” at preventing your information from being stolen and used to open new accounts, credit expert Barry Paperno, who blogs at Speaking of Credit, told NerdWallet. And, it can be turned on and off as needed for, say, a mortgage application or credit re-check before a closing.
“There are no downsides to this: You can still use your credit cards with the freezes on,” said Realtor.com. “But no one will be able to check credit scores and personal information without your permission—so no bad apples can open up fraudulent new cards or get loans under your name. And you can undo the freezes at any time – typically for a small fee.”
That fee varies depending on the state, and Equifax has said it will offer free freezes for 30 days, but the need for freezing will extend long after that is over. “Because a freeze can prevent fraud, it’s better than a credit monitoring service, which only alerts you that fraud might have happened,” said NerdWallet. “It’s the difference between using a deadbolt to keep thieves out rather than a security camera to catch them after the fact.”
You can easily request a freeze online for the three credit unions: Equifax, Experian, and TransUnion.
Fraud alerts
“If you don’t want to lock out all creditors – perhaps you’re in the middle of mortgage shopping or refinancing – you can place a 90-day fraud alert on your credit,” they added. “This tells potential creditors to verify your identity before issuing credit in your name.” A fraud alert is a good idea whether or not you freeze your credit. In this day and age, when hacks are more frequent and more damaging to more people, ongoing monitoring just makes sense.
“The biggest fears of identity theft “center around identity theft on an epic scale. It isn’t tough to conjure up worst-case scenarios,” said Realtor.com. “Think about it: Bad guys with all of someone’s information could, at least theoretically, try to buy a home under that person’s name. It’s more likely, though, they would use those stolen credit card numbers – or use SSNs to open up new credit cards – and rack up lots of debt in that unsuspecting victim’s name. And that damage could make it much harder for someone to qualify for a mortgage or refinance an existing mortgage.”
Consumers have largely been turning to ID theft protection company LifeLock, who the Los Angeles Times said could be “one of the big winners from the big data breach suffered by Equifax.” Not surprisingly, the firm has upped its advertising outreach in the wake of the breach. The result: “An executive of Symantec, LifeLock’s parent company, told Bloomberg that since the Equifax breach was reported, LifeLock’s Web traffic has increased sixfold and enrollments per hour are running 10 times ahead of the pre-Equifax era.”
But, there’s a rub: “Here’s what LifeLock isn’t advertising so widely: When you buy its protection, you’re signing up for credit reporting and monitoring services provided by, yes, Equifax. LifeLock signed a four-year contract with Equifax in December 2015,” and the relationship is still active.
If any (or all!) of that makes you queasy, there are alternatives to LifeLock you may want to consider.
