Experian Site Can Give Anyone Your Credit Freeze PIN
Summary: Experian's website let anyone request the PIN needed to unfreeze a consumer credit file by supplying a name, address, date of birth and Social Security number, then answering four knowledge-based authentication questions. Krebs reported that more than a dozen Twitter followers with Experian freezes tested the portal and most retrieved their PINs on the site and via email, while his own attempt failed and directed him to mail in the request.
Why it matters: The data needed to pass those checks is the same data exposed in the Equifax breach and sold in the cybercrime underground, so the portal undercuts the freeze itself - and Krebs notes Experian had not responded to requests for comment.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026