What happened in the Equifax breach and whether your information was exposed
In 2017, Equifax — one of the three major credit reporting agencies — disclosed that hackers had accessed the personal information of approximately 147 million people. The breach exposed names, Social Security numbers, birth dates, addresses, and driver's license numbers. If you had credit activity in the United States between mid-2013 and mid-2015, your information may have been part of this breach.
Equifax set up a dedicated website to let people check whether their data was exposed. The site is called equifaxsecuritybreach.com, and it remains active years after the breach occurred. You can check your name and other details there at no cost.
Knowing whether you were affected matters because it tells you how much risk you face from identity theft and fraud. If your Social Security number was exposed, you have a stronger reason to monitor your credit reports and consider fraud protection measures. If you were not affected, you still benefit from understanding how the breach happened and what protections exist.
Key Takeaways
- The Equifax breach exposed names, Social Security numbers, birth dates, and addresses for roughly 147 million people between 2013 and 2015.
- You can check whether your information was exposed at equifaxsecuritybreach.com by entering your last name and the last six digits of your Social Security number.
- Equifax offered free credit monitoring and identity theft protection to affected individuals, though the offer had a time limit that has now passed.
- Even if you were not in the breach, monitoring your credit reports regularly and placing a fraud alert or credit freeze can protect you from identity theft.
How to check if your name is in the Equifax breach
Go to equifaxsecuritybreach.com. The site will ask you to enter your last name and the last six digits of your Social Security number. You do not need to enter your full Social Security number, which keeps the process safer. After you submit this information, the site will tell you whether your data was part of the breach.
The check takes seconds. You will see one of two results: either "Based on the information provided, we have no record of your information in the Equifax breach" or a message indicating that your information was exposed. If you were affected, the site will offer you information about the protections Equifax made available.
Keep in mind that this check is specific to the 2017 Equifax breach. Other data breaches have happened before and since, and other companies have suffered breaches too. This tool only tells you about Equifax's 2017 incident.
What to do if your information was exposed
If the check shows your data was in the breach, your next step depends on what protections you want. Equifax originally offered two years of free credit monitoring and identity theft protection services to affected people. However, that offer had an expiration date, and most people who were affected in 2017 are now outside that window.
You can still take steps to protect yourself. The most direct action is to place a fraud alert or credit freeze with all three credit bureaus — Equifax, Experian, and TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. A credit freeze blocks lenders from accessing your credit report entirely unless you temporarily lift it. Both are free and do not require you to pay Equifax or any other company.
To place a fraud alert, contact one of the three bureaus by phone or online, and they will notify the other two. To place a credit freeze, you must contact each bureau separately. The Federal Trade Commission (FTC) website has current contact information for all three bureaus and walks through the process step by step.
Monitoring your credit reports after a breach
Once your information has been exposed, monitoring your credit reports becomes more important. You are may have access to to one free credit report from each of the three bureaus every 12 months through annualcreditreport.com, which is the official site run by the bureaus themselves. You can pull all three reports at once or space them out over the year.
When you review your reports, look for accounts you did not open, inquiries from lenders you did not contact, and addresses or employers you do not recognize. These can be signs that someone is using your information. If you find something suspicious, contact the bureau that reported it and file a dispute. You can also file a report with the FTC at identitytheft.gov.
Some people also use credit monitoring services that alert them when new accounts are opened or inquiries are made. These services range from free (some banks and credit card companies offer them) to paid subscriptions. The free options through your bank or card issuer are usually sufficient if you are also checking your reports regularly.
Understanding fraud alerts versus credit freezes
A fraud alert is a note on your credit report that tells lenders to take extra steps to verify your identity before extending credit. It lasts one year and is free to place. When you explore for credit, the lender will call you to confirm it is really you. This slows down the process slightly but does not block legitimate credit applications.
A credit freeze is stronger. It prevents lenders from seeing your credit report at all unless you give permission. This means you cannot open new credit accounts, get a mortgage, or even sign up for a cell phone plan without temporarily lifting the freeze. A credit freeze lasts until you remove it, and it is also free. If you plan to explore for credit soon, a fraud alert may be more practical. If you do not plan to borrow money, a freeze offers more protection.
You can use both at the same time. Some people place a freeze and add a fraud alert as a backup. The choice depends on how much inconvenience you are willing to accept in exchange for stronger protection.
What the Equifax breach means for your long-term financial security
The Equifax breach was significant because it exposed not just financial information but also the data needed to impersonate someone — name, Social Security number, and birth date. This makes identity theft easier and more likely to go unnoticed for a while. However, the breach also led to increased awareness of credit monitoring and fraud protection, and many people now check their credit reports more regularly than they did before.
If you were affected, this is a good time to review your overall financial security practices. Use strong, unique passwords for financial accounts. Enable two-factor authentication wherever it is offered. Keep your contact information current with your banks and credit card companies so they can reach you if something suspicious happens. These habits protect you not just from the Equifax breach but from other threats too.
The breach also highlighted why credit freezes and fraud alerts exist. They are free tools designed for situations exactly like this one. Using them is not paranoid — it is practical risk management.
Frequently Asked Questions
Do I have to pay to check if I was in the Equifax breach?
No. The check at equifaxsecuritybreach.com is free. Be cautious of other websites that claim to check the breach for you — some charge fees or try to sell you monitoring services. The official Equifax site is the reliable source.
If I was not in the breach, do I still need to worry about identity theft?
Yes. Many other breaches have happened, and your information may have been exposed through a different company. Monitoring your credit reports regularly and placing a fraud alert or freeze are good practices regardless of whether you were in the Equifax breach specifically.
Can I sue Equifax for the breach?
Equifax settled a major class action lawsuit in 2019 and paid out hundreds of millions of dollars. If you were affected, you may have been part of that settlement. Check the settlement website to see if you are may be able to access for compensation, though the process for claiming money has largely closed.
How long does a credit freeze last?
A credit freeze lasts until you remove it. You can lift it temporarily when you need to explore for credit, then put it back in place. There is no expiration date, so you can keep a freeze active indefinitely at no cost.
Will a fraud alert or credit freeze hurt my credit score?
No. Neither a fraud alert nor a credit freeze affects your credit score. They do not appear on your credit report in a way that lenders see as negative. They only affect whether lenders can access your report in the first place.