![]() ![]() PINs going the way of the dinosaur, but remnants and language of the PIN era still not gone/up to date.Experian’s page for retrieving someone’s credit freeze PIN requires little more information than has already been leaked by big-three bureau Equifax and a myriad other breaches.ĭune Thomas is a software engineer from Sacramento, Calif. My recent experience with 3 of these (I don’t worry about Innovis.maybe I should) was the same. There does appear to be an option to log in to one's Innovis account on the page, though I did not have to use it to execute the lift. I was able to successfully implement a temporary lift using the old information from 2015, and the website indicated I would be mailed a confirmation. I had arranged a security freeze online, and Innovis had mailed me a PIN. Whether the same PIN I was given back in 2015 would have worked, I don't know. I noticed a link asking "Need to Change your PIN?" The tooltip for this link explained "You'll only need your PIN if you make changes to your freeze via phone." So, apparently, if you want to call or use their phone app to lift a freeze, probably you'll need a PIN. Once logged into the account, it confirmed my report was frozen. I went through the "Forgot Login Information" process, and it returned "If you have not used our Freeze site since it was updated, you may need to create a new user account." So I created a new account. The username and password I created back in 2015 did not work. (WHAT?!?!) Not too concerned because my login was required, but Equifax should fix the wording. On the completion screen, it again mentioned that a PIN is needed for a lift. However, while logged in, I submitted a temporary two-day lift and the site implemented it without ever asking for the PIN. The language on the page indicated I would need my PIN for a lift. Per US PIRG suggestion, I permanently removed my freeze and then re-added and created a new pin. As I result, I've tested each of my pins acquired back in 2015. Anyone have any insight into why these agencies still don't take security seriously? I'm wondering if its a waste of time to have freezes in place since anyone with information to get a loan in my name can apparently use that same info to unfreeze my credit. I'm baffled at how flawed these unfreezes were. After this they actually showed me the PIN (which I already knew) that I had written down prior. They did have a few questions (similar to those when you request a credit report) to establish my identity so were better than Equifax. ![]() More secure than Equifax at least.Įxperian - Had me enter my address, SS#, etc. I used this to unfreeze - so at least someone would have needed this password to unfreeze (unless there is an easy password reset mechanism that can be used). TransUnion - Back when I froze my credit I had entered username/password as part of the freeze process. I did establish a user-login this time so hopefully no further actions can be taken without these credentials. They are the one that had the breech and appear to be the least secure - you would have thought they would be most secure. Anyone could have done this on my behalf. I just went through and removed the freeze at the Big 3 agencies and NOT ONE of them asked for the PIN! So anyone with my information would have been able to do so.so what's the point?!!Īnyone understand this? What's the point in having a freeze that requires a PIN if the PIN isn't required to unfreeze? If someone has my Name/Address/SS# they can unfreeze my credit.ĮquiFax - made me set up a new account with a username and password in order to unfreeze my credit. ![]() Each of the 3-major agencies gave me a PIN - very important to keep this in a safe place in case you ever want to remove the freeze - or so they said. ![]() So back after the Equifax debacle happened I froze all my credit. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |