“Just because you’re paranoid doesn't mean they’re not really after you,” is a phrase my dad used to say. As a victim of identity theft, it’s become a vital principle in my life – at least when it comes to my personal information.
Working with our cybersecurity department, I’ve learned to have a security-focused mindset – both at work and in my personal life. So, I was shocked to receive a collection letter from an insurance company I had never dealt with.
Come to find out, someone had gotten a hold of enough of my personal information to open a fraudulent insurance policy in my name. In my case, criminals had (and continue to obtain) my:
- Name
- Address
- Social Security Number
- Birthday
- Driver's License Number
- Phone Number
"Someone had opened an insurance policy online, in my name, without question."
Even though I had done everything right, I still became the victim of identity theft. My information was stolen in the 2017 Equifax data breach that affected millions of Americans, yet fraudulent activity began 6 years later. More than half of Americans have had their personal data breached. The type of stolen data varies, but with major breaches like Equifax (163 million records), First American Financial Corporation (885 million records), and National Public Data (2.7 billion records) the chances of your information being available on the dark web is increasing.
Tackling Stolen Identity
Having your identity stolen is both stressful, time-consuming, and ongoing. Thankfully, before criminals began using my information, I had a credit freeze with all three credit reporting agencies (thanks for the wisdom, Dad). Here are the steps to take in the event your identity is stolen:
- Contact the Company Where the Fraudulent Account was Established
First, I called the insurance company listed on the collection letter. Through this phone call, I discovered that someone had opened a fraudulent insurance policy online - in my name - without question. The company's data breach department then guided me through the next steps to address the issue.
- Report Your Stolen Identity on IdentityTheft.gov
Next, I reported it to IdentityTheft.gov, a comprehensive FTC-run website. This site guides you through reporting identity theft and starting the recovery process. There, you can file a report and get a checklist for remediation and prevention steps.
- Notify All Three Credit Bureaus
It is imperative to place Fraud Alerts with all three credit agencies - even if you have already placed credit freezes on your accounts. Doing so adds another layer of protection that helps all three bureaus to further protect your information.
- Freeze Your Credit on all Three Credit Bureaus
Don’t wait for a data breach, freeze your credit now. This is a free service with all three credit bureaus. I had placed credit freezes with all three agencies before my information was used. I can't imagine how difficult it would have been to remediate countless loans, policies, etc. both in my state and across state lines. These are the three credit reporting agencies:
- Experian
- TransUnion
- Equifax
- Review All Three Credit Reports
Be vigilant. Look at your credit reports regularly. There’s a site called AnnualCreditReport.com where you can check your credit reports weekly for free.
- Report the Criminal Activity to Law Enforcement
There may be times when you will need a police report to take further action in protecting your identity and - depending on the nature of the crime - prosecuting the offender(s). Start with your local police department. They will help you file a report. This also comes in handy should anyone commit a crime in your name using your stolen information.
"Thankfully, before criminals began using my information to open accounts, I had a credit freeze on all three credit reporting agencies."
Ongoing Security Efforts
If your information has been breached – and I would advise that even if it has not yet been breached – here are additional steps to further protect yourself and your information:
- Extend credit freezes with all three Credit Reporting agencies (Equifax, TransUnion, Experian).
- Place a freeze on anyone trying to open a bank account in your name through ChexSystems.
- Set up an IP PIN with the IRS so no one can file taxes in your name.
- Change ALL of your passwords every 90 Days.
- Use a Password Manager to store all of your passwords.
- Ensure Multi-Factor Authentication (MFA) is set up on all accounts.
- Check credit reports regularly through AnnualCreditReport.com.
- Dispute any discrepancies on your credit reports immediately.
- Apply for a new driver’s license number through the DMV.
Having your personal information stolen doesn’t have to be devastating. Taking the proper precautions, diligently monitoring your credit, and responding swiftly to breaches will help to lessen the impact in the case of stolen identity.