New York AG launches formal investigation into Equifax breach

As part of a formal investigation into the massive breach involving credit-reporting agency Equifax, which has effected about 143 million U.S. consumers, New York Attorney General Eric Schneiderman sent a letter to Equifax seeking additional information about the breach.

The breach lasted from mid-May through July, when hackers accessed names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. Approximately 209,000 individuals had their credit card numbers stolen.

“The Equifax breach has potentially exposed sensitive personal information of nearly everyone with a credit report, and my office intends to get to the bottom of how and why this massive hack occurred,” Attorney General Schneiderman said in a statement.

Action measures

Consumers can contact a call center at 866-447-7559 to determine if they have been affected by the breach. The call center is open every day, including weekends, from 7:00 a.m. – 1:00 a.m. Eastern Standard Time. 

Consumers should also consider taking these additional steps:

Check your credit reports from Equifax, Experian, and TransUnion by visiting annualcreditreport.com. Accounts or activity that you do not recognize could indicate identity theft. This is a free service.

Consider placing a credit freeze on your files. A credit freeze makes it harder for someone to open a new account in your name. It will not prevent a thief from using any of your existing accounts.

Monitor your existing credit card and bank accounts closely for unauthorized charges. Call the credit card company or bank immediately about any charges you do not recognize.

Since Social Security numbers were affected, there is risk of tax fraud. Tax identity theft happens when someone uses your Social Security number to get a tax refund or a job. Consider filing your taxes early and pay close attention to correspondence from the IRS.

Under New York law, businesses with New York customers are required to inform customers and the Attorney General’s Office about security breaches that have placed personal information in jeopardy. The Attorney General’s Office investigates data breaches to determine if customers were properly notified of the breach and if the entity had appropriate safeguards in place to protect customers’ data.