Embed Notice

If you happen to live in the United States, the consumer credit reporting bureau Experian is easily the shittiest company you will deal with as long as you have heartbeat. IRS? Hahaha. Experian will take your privacy and security. Seriously.

I just sometimes don't think I can do enough to call attention to the barbaric practices of Experian when it comes to letting their hapless and often reluctant "customers" manage their relationship with the Mother Ship.

I pointed out like 3 years ago that if you're a US citizen and you have instructed Experian to "freeze" your credit file so that ID thieves and other ne'er-do-wells can't just apply as you for credit wherever, that designation means absolutely squat because Experian will happily let anyone "become" you if they can supply your name, address, DOB, SSN and can successfully guess or answer 3 out of 4 multiple guess questions based entirely on public information.

This is still the case. I received an email this morning from another victim who had their freeze reversed at Experian.

Past reporting

https://krebsonsecurity.com/2022/07/experian-you-have-some-explaining-to-do/

https://krebsonsecurity.com/2023/11/its-still-easy-for-anyone-to-become-you-at-experian/

https://krebsonsecurity.com/2023/01/experian-glitch-exposing-credit-files-lasted-47-days/

https://krebsonsecurity.com/2023/01/identity-thieves-bypassed-experian-security-to-view-credit-reports/

https://krebsonsecurity.com/2021/04/experian-api-exposed-credit-scores-of-most-americans/