Experian Credit Report Dispute Phone Number

Experian Credit Report Dispute Phone Number – Identity thieves were exploiting an apparent security vulnerability at Experian, one of the three largest consumer credit reporting bureaus. Typically, Experian requires that those requesting a copy of their credit report successfully answer multiple-choice questions about their financial history. But until the end of 2022, Experian has allowed anyone to skip those questions and go straight to the consumer report. All that was required was the person’s name, address, date of birth and social security number.

In December, I heard from Genia Kushner, a security researcher based in Ukraine, who discovered a method identity thieves use after spending time on Telegram chat channels, which are dedicated to extracting compromised identities.

Experian Credit Report Dispute Phone Number

Experian Credit Report Dispute Phone Number

Kushner wrote in an email explaining his motives for the admission. “If I can make a small change in some way and help make it better, I can feel inside that I’ve really done something important and helped other people.”

Identity Theft Victim Assistance

Kushner said scammers knew they could trick Experian into giving them access to someone’s credit report by modifying the address displayed in a browser’s URL bar at a certain point in Experian’s identity verification process.

Experian Credit Report Dispute Phone Number

At Kushner’s instructions, I requested a copy of my credit report from Experian through annualcreditreport.com—a website that requires all Americans to provide a free copy of their credit report once a year from the three major reporting bureaus.

Annualcreditreport.com starts by asking for your name, address, social security number and date of birth. After I submitted this and told annualcreditreport.com that I wanted my experienced report, I was directed to Experian.com to complete the identity verification process.

Experian Credit Report Dispute Phone Number

What Can’t You Dispute On Your Credit Report?

Typically at this point, the Experian website will offer four or five multiple guess questions, such as “Which of the following addresses have you lived at?”

Kushner told me that when the inquiries page loads, you can change the last part of the URL from “/acr/oow/” to “/acr/report” and the site will display the customer’s full credit report.

Experian Credit Report Dispute Phone Number

But when I tried to get my report from Experian through annualcreditreport.com, the Experian website said it didn’t have enough information to verify my identity. It won’t even show me the four multiple guess questions. Experian said at this time I have three options for a free credit report: mail in the application with identification documents, call the Experian phone number, or upload proof of identification through the website.

How To Reach A Human At The Credit Bureaus

But it didn’t stop Experian from displaying my full credit report after I changed the Experian URL as Kushnir instructed – modifying the error page suffix URL from “/acr/OcwError” to just “/acr/report”.

Experian Credit Report Dispute Phone Number

Even though Experian says it can’t say it was actually me, it scoffs at my report. And thank God I did. There are many errors in the report which may require some effort on my part to correct.

Now I know why Experian won’t let me view my profile through their website. For example, I had four phone numbers on my Experian credit file: only one of them was mine, and that number hadn’t been mine for a long time.

Experian Credit Report Dispute Phone Number

The 3 Major Credit Bureaus And What They Do

I was so appalled by Experian’s incompetence that I asked a close friend and trusted security source to try the method on his Experian profile. Sure enough, when I got to the part where Experian asks questions, changing the last part of the URL in its address bar to “/report” bypassed the questions and immediately displayed its full credit report. His report was also full of errors.

He shared Kushner’s findings with Experian on December 23, 2022. On December 27, 2022, Experian’s PR team acknowledged receiving the December 23 notification, but the company has so far ignored multiple requests for comment or clarification.

Experian Credit Report Dispute Phone Number

By the time Experian confirmed receipt of my report, Kushner’s “exploit” said he had learned of the identity thieves on Telegram and would no longer work. But it’s still unclear how long the Experian website has been making it so easy to access one’s credit report.

Experian Business Credit ..how To Dispute ?

In response to previously shared information, Sen. Ron Wyden (D-Fla.) said he was disappointed — but not at all surprised — to hear about another cybersecurity bug at Experian.

Experian Credit Report Dispute Phone Number

“Credit bureaus are poorly regulated, act as if they are above the law and care little for congressional oversight,” Wyden said in a written statement. “Just last year, Experian ignored repeated briefing requests from my office after another lapse in the company’s cybersecurity was uncovered.”

The above quote from Senator Wyden refers to a story published here in July 2022, which broke the news that identity thieves were hijacking customers’ Experian.com accounts by signing up for Experian again, and providing the target with persistent, personal information (name, DoB/SSN , address) but a different email address.

Experian Credit Report Dispute Phone Number

How To Speak To A Live Person At Experian

Interviews with several victims reached after that story revealed that Experian customer support representatives were telling customers who had been banned from their Experian accounts to recreate their account with their personal information and new email addresses. This tip from Experian was also for people who just specified that identity thieves used this method to lock them out in the first place.

The veteran apparently found it easier to respond this way than to acknowledge the problem and address the root causes (slow authentication and unsavory account recovery methods). It’s also worth noting that reports of hijacked Experian.com accounts continued until the end of 2022. The mistake has led to a class action lawsuit against Experian.

Experian Credit Report Dispute Phone Number

Sen. Wyden said the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB) need to do more to protect Americans from the mistakes of credit bureaus.

How To Dispute A Credit Report

“If they don’t feel they have the right to do that, they should pass legislation like the Mind Your Own Business Act, which gives the Federal Trade Commission the authority to set stricter cybersecurity standards for companies like Experian,” Wyden said. was

Experian Credit Report Dispute Phone Number

Sadly, none of this is terribly shocking behavior for Experian, which has shown itself to be a grossly negligent keeper of obscene amounts of highly sensitive consumer information.

In April 2021, it revealed how identity thieves were using Permitted Authentication on Experian’s PIN recovery page to unfreeze consumer credit files. In these cases, the veteran fails to send any email notification when the freeze pin has been retrieved,

Experian Credit Report Dispute Phone Number

How To Dispute Credit Report

It is also not necessary to send the PIN to an email address already associated with a customer account

A few days after that story in April 2021, I broke the news that the Experian API was exposing the credit scores of most Americans.

Experian Credit Report Dispute Phone Number

It’s so bad that we can’t really pick on companies like Experian that make $2.6 billion every quarter from collecting and selling our personal and financial information. But there should be meaningful liability when these monopolistic corporations engage in negligent and reckless behavior

How To Contact The Credit Bureaus

And as we saw with Equifax’s consolidated class action settlement in response to allowing Chinese state-sponsored hackers to steal the data of nearly 150 million Americans in 2017, class actions and more ludicrous “free credit monitoring” services were created by the same companies. Problem won’t cut it.

Experian Credit Report Dispute Phone Number

It’s easy to take a defeatist attitude with credit bureaus, which often royally screw things up even for consumers who are diligent enough to monitor their credit files and question any errors.

But there are some concrete steps that everyone can take that will significantly reduce the risk of identity thieves ruining your financial future. Fortunately, most of these steps have the side benefit of costing the credit bureaus money, or at least making the data they collect about you less valuable over time.

Experian Credit Report Dispute Phone Number

How To Lock Your Credit

The first step is awareness. Find out what these companies are saying about you behind your back. Keep in mind that – fair or not – your credit score as determined collectively by these bureaus can affect whether you get that loan, apartment or job. In this regard, even small, inadvertent mistakes unrelated to identity theft can have major consequences for consumers in the future.

Each bureau is required to provide a free copy of your credit report each year. The easiest way to get it is through annualcreditreport.com.

Experian Credit Report Dispute Phone Number

Some customers report that the site never works for them, and each bureau will insist that they don’t have enough information to make a report. I’m definitely in this camp. Fortunately, one of the financial institutions I already have a relationship with offers the ability to view your credit file through them. Your mileage may vary on this front, and you may eventually need to mail copies of your identification documents or the website.

Identity Thieves Bypassed Experian Security To View Credit Reports

When you get your report, look for anything that isn’t yours, then document the dispute and submit it to the relevant credit bureau. And after reviewing your report, set a reminder in the calendar so that it repeats every four months, reminding you that it’s time to get another one.

Experian Credit Report Dispute Phone Number

Similar Posts