The Equifax Breach: A Quick Refresher
In September 2017, Equifax announced one of the largest data breaches in history. Hackers accessed the personal information of approximately 147 million Americans — nearly half the US population.
The stolen data included:
- Names
- Social Security numbers
- Birth dates
- Addresses
- Driver's license numbers
- Credit card numbers (for some)
This wasn't just a minor inconvenience. This data is everything an identity thief needs to open accounts, file fraudulent tax returns, and destroy your credit.
The Settlement: What Equifax Agreed To Pay
Equifax settled with the FTC, CFPB, and 50 states for up to $700 million:
| Category | Amount |
|---|---|
| Consumer restitution fund | $380.5 million |
| Additional fund (if needed) | $125 million |
| State penalties | $175 million |
| CFPB penalty | $100 million |
| Total | $700+ million |
Additionally, Equifax committed to spending $1 billion on data security improvements.
What Benefits Are Still Available in 2026?
While the initial claim deadline passed years ago, several benefits remain available:
1. Free Credit Monitoring (Through 2027)
All affected individuals can receive free credit monitoring through the settlement. This includes:
| Service | What's Included |
|---|---|
| Credit monitoring | All three bureaus (Equifax, Experian, TransUnion) |
| Identity restoration | Help if your identity is stolen |
| Identity theft insurance | Up to $1 million coverage |
| Duration | Through January 2027 |
How to enroll:
- Visit equifaxbreachsettlement.com
- Check if you were affected
- Enroll in free credit monitoring
- Set up alerts for new activity
2. Extended Claims Period for Identity Theft
If you experienced identity theft or fraud related to the breach, you may still be able to file a claim:
What qualifies:
- New account fraud (someone opened accounts in your name)
- Tax fraud (fraudulent returns filed using your SSN)
- Government benefits fraud
- Medical identity theft
- Other documented identity theft
What you can claim:
- Up to 20 hours of time spent at $25/hour = $500
- Out-of-pocket expenses (with documentation)
- Professional service costs (fraud recovery services, etc.)
Important: You must be able to document that the fraud was related to the Equifax breach.
3. Restored Credit Monitoring Benefits
If you previously enrolled but your coverage lapsed, you may be able to re-enroll:
- Visit the settlement website
- Log in with your original claim ID
- Check your current enrollment status
- Re-enroll if eligible
How to Check If You Were Affected
Method 1: Equifax's Official Tool
- Go to equifaxbreachsettlement.com
- Click "Check Your Eligibility"
- Enter your last name and last 6 digits of your SSN
- The tool will confirm if your data was compromised
Method 2: Your Settlement Records
If you filed a claim originally:
- Check your email for settlement correspondence
- Look for your claim ID number
- Log in to the settlement portal
Method 3: Assume You Were Affected
Given that 147 million Americans were affected:
- If you had a credit file with Equifax in 2017, you were likely affected
- If you've ever had a credit card, loan, or mortgage, you likely had an Equifax file
- When in doubt, check the official tool
Maximizing Your Recovery in 2026
Step 1: Enroll in Free Credit Monitoring (If You Haven't)
This benefit runs through 2027. If you're not enrolled, you're leaving valuable protection on the table.
Value: Comparable services cost $20-30/month = $240-360/year
Step 2: Document Any Ongoing Identity Issues
If you've experienced identity theft that may be related to the breach:
Keep records of:
- Police reports
- FTC Identity Theft Reports
- Bank and credit card fraud notices
- Collection notices for accounts you didn't open
- Credit report disputes
- Time spent resolving issues (keep a log)
Step 3: File a Supplemental Claim (If Eligible)
For documented identity theft cases:
- Gather all documentation
- Visit the settlement website
- Submit a supplemental claim form
- Include all supporting evidence
- Track your claim status
Step 4: Continue Monitoring Your Credit
Even after the settlement monitoring ends:
| Action | Why It Matters |
|---|---|
| Annual free credit reports | Catch unauthorized accounts |
| Credit freezes | Prevent new account fraud |
| Fraud alerts | Add extra verification requirements |
| Tax identity protection | Prevent tax refund theft |
Lessons from the Equifax Breach
What Went Wrong
- Unpatched vulnerability: Equifax failed to update software with a known security flaw
- Detection failure: The breach went undetected for 76 days
- Delayed disclosure: Equifax waited 6 weeks after discovery to notify consumers
- Inadequate response: Initial settlement website was confusing and poorly managed
What Changed
The Equifax breach triggered significant reforms:
| Change | Impact |
|---|---|
| Free credit freezes | All credit bureaus now offer free freezes (previously cost $5-10) |
| Enhanced data security laws | Many states passed stricter data protection requirements |
| Greater FTC enforcement | More aggressive action against data breaches |
| Consumer awareness | More people monitor their credit regularly |
Related Settlements You Should Know About
If you were affected by Equifax, you may also be eligible for these data breach settlements:
Capital One (2019 Breach)
- 100 million affected
- Settlement: $190 million
- Benefits: Cash payments + credit monitoring
T-Mobile (2021 Breach)
- 77 million affected
- Settlement: $350 million
- Benefits: Cash payments + identity protection
Yahoo (2013-2016 Breaches)
- 3 billion accounts affected
- Settlement: $117.5 million
- Benefits: Cash payments + credit monitoring
Marriott/Starwood (2018 Breach)
- 500 million affected
- Benefits: Identity monitoring services
Protecting Yourself Going Forward
The Essential Checklist
Credit Protection:
- [ ] Freeze your credit at all three bureaus (free)
- [ ] Set up fraud alerts
- [ ] Review credit reports annually (annualcreditreport.com)
- [ ] Monitor for unauthorized accounts
Identity Protection:
- [ ] Use unique, strong passwords
- [ ] Enable two-factor authentication everywhere
- [ ] Be cautious of phishing attempts
- [ ] Shred sensitive documents
Tax Protection:
- [ ] File your taxes early (before fraudsters can)
- [ ] Get an IRS Identity Protection PIN
- [ ] Monitor IRS account activity
Financial Monitoring:
- [ ] Review bank statements monthly
- [ ] Set up account alerts
- [ ] Use a dedicated email for financial accounts
Frequently Asked Questions
Q: I missed the original claim deadline. Can I still get cash?
A: The cash payment deadline has passed. However, you can still enroll in free credit monitoring (through 2027) and file supplemental claims for documented identity theft.
Q: How much did people receive from the cash settlement?
A: Initial estimates of $125 were reduced significantly due to high claim volume. Most claimants received $5-10 cash or selected credit monitoring instead.
Q: Is the credit monitoring worth it?
A: Yes. The settlement monitoring includes all three bureaus and identity theft insurance worth up to $1 million. Comparable services cost $240-360/year.
Q: Can I sue Equifax separately?
A: By accepting settlement benefits, you likely released your claims. However, if you experienced significant damages not covered by the settlement, consult an attorney.
Q: Should I be worried about my data from 2017?
A: Unfortunately, yes. Stolen SSNs and personal information have permanent value to criminals. Continue monitoring your credit and identity indefinitely.
Take Action Today
Even years after the breach, there are still steps you should take:
- Check your eligibility at equifaxbreachsettlement.com
- Enroll in credit monitoring if you haven't
- Document any identity theft for potential claims
- Implement ongoing protection (freezes, monitoring, alerts)
The Equifax breach exposed the personal data of half of America. The settlement provides some remedy, but protecting yourself is ultimately your responsibility.
Settlement benefits and deadlines are subject to change. Visit equifaxbreachsettlement.com for current information. This article is for informational purposes and does not constitute legal advice.