[] [] [prev-tail] [tail] [up]

Incident Response Protocol

In the event of an identity compromise, rapid containment is paramount. Execute the following protocol:

Secure Existing Accounts

Immediately contact the fraud departments of all affected banks, credit card companies, or lenders. Close compromised accounts, dispute fraudulent transactions, reset login credentials, and enforce hardware-based MFA.

Execute Credit and ChexSystems Freezes

Freeze every credit file you have not already frozen. You must contact all three nationwide bureaus separately — a freeze placed at one does not propagate. Under 15 U.S.C. §1681c-1(i) (FCRA §605A) each agency must act only on the request it receives itself. The one-call rule people remember applies to fraud alerts under §1681c-1(a)(1)(B), where the bureau you call must refer the request to the others. Confusing the two is the most common way a victim ends up with one file frozen and two wide open. Add Innovis for the same reason, then contact ChexSystems — a specialty consumer reporting agency tracking deposit history (account closures, bounced checks) that banks use to screen new applicants — to freeze your deposit record as well.

Taxpayer Identity Protection

File Form 14039, “Identity Theft Affidavit” through the IRS Identity Theft Central portal to report the compromise and request an IP PIN. Also submit a formal request to request copies of the fraudulent returns filed in your name.

File an FTC Complaint

Report the identity theft to the FTC through their website at IdentityTheft.gov or by calling 1-877-438-4338 to generate an FTC Identity Theft Report and establish a recovery plan.

File a Police Report

Contact local law enforcement and provide them with all details. The combination of the FTC report and the police report constitutes an official Identity Theft Report, providing critical statutory protections under the Fair Credit Reporting Act (FCRA), including the right to block fraudulent information from appearing on your credit reports ( 15 U.S.C. §1681c-2) and to cease collection actions on fraudulent debt.

Freeze Specialty Resellers

Contact CoreLogic Credco at Credco Consumer Assistance to freeze downstream credit data transmission, which prevents resellers from providing compromised files to mortgage lenders.

Address Affected Accounts

Close all fraudulent accounts opened in your name. In all correspondence disputing charges with creditors, send copies of the FTC Identity Theft Report and the police report.

Regularly Review Credit Reports

Once the immediate issue is resolved, continue to monitor your credit reports regularly. Keeping yourself informed will allow you to detect any recurrence of theft and act swiftly.

[] [] [prev-tail] [front] [up]