After a Texas data-breach notice, know what a credit freeze actually does
Freezes and fraud alerts work differently, and neither replaces a review of existing accounts. Texas also has a separate complaint route for affected consumers.
Texas gives consumers who receive a data-breach notice a different reporting route from the company that suffered the breach. The attorney general directs individuals to its consumer complaint form; the separate Data Breach Report is for authorized representatives of the affected organization.[3]
Reporting a breach to the state does not place a credit freeze. Credit-reporting companies handle freezes and fraud alerts, while a review of bank statements checks activity in existing accounts.[1][3][4]
A security freeze restricts prospective creditors' access to a credit file. Because lenders typically want to see that file before issuing credit, a freeze can help prevent someone from opening a new account using another person's identity.[2] It should not be treated as a guarantee against every form of financial fraud.
The Consumer Financial Protection Bureau says freezes can be placed and removed free at Equifax, Experian and TransUnion. A person must contact each company separately.[2] That means one freeze request does not complete the process across all three nationwide companies.
There is no requirement to wait for a breach or confirmed identity theft before placing a freeze, according to the Federal Trade Commission.[1] The CFPB also says a freeze does not affect credit scores, and consumers can still request and review their own credit files while one is in place.[2]
A freeze can affect the person's own application for new credit. The FTC suggests finding out which bureau a lender will use, lifting the freeze there for the credit check and restoring it afterward.[1] The CFPB says temporary lifts are free and can cover a period the consumer specifies.[2]
A fraud alert works differently. It calls for businesses to verify identity before opening new credit, without blocking access to the credit report.[1] For an initial alert, someone who is or suspects they may be affected by identity theft can contact one of the three bureaus. That bureau must notify the other two.[1]
An initial alert lasts one year and can be renewed, the FTC says.[1] The difference in setup is easy to miss: freezes require separate contact with all three companies; an initial fraud alert starts with one.[1][2]
Existing accounts still deserve attention. The Texas attorney general advises consumers to read bank and credit-card statements, check for unauthorized withdrawals or charges, and report problems promptly by phone and in writing.[4] Reviewing those transactions addresses activity that a new-account credit check would not reveal.
The state also advises against sharing personal or financial information through calls, mail or the internet unless the consumer has a trusted relationship with the requester and initiated the contact.[4] A breach notice should not become a reason to hand sensitive information to an unverified caller.
This is general consumer information, not individualized financial advice. Keep the breach notice and make a separate record of which credit bureaus received a freeze request or fraud alert. Put any questionable statement entries alongside that record, so the next conversation concerns a specific account, transaction or request.