Equifax hackers got 10.9M driver's license numbers: How to protect yourself



Myles Ma

Myles Ma

Senior Reporter

Myles Ma is a senior reporter at Policygenius, where he covers personal finance and insurance and writes the Easy Money newsletter. His expertise has been featured in The Washington Post, PBS, CNBC, CBS News, USA Today, HuffPost, Salon, Inc. Magazine, MarketWatch, and elsewhere.

Published|2 min read

Policygenius content follows strict guidelines for editorial accuracy and integrity. Learn about our editorial standards and how we make money.

More bad news for those of us who don't live off the grid: Identity thieves could have our licenses too. The same Equifax breach that exposed the Social Security numbers of more than 145 million people also compromised the driver's license data of 10.9 million Americans, the Wall Street Journal reported. (Equifax did not immediately respond to our request for comment on the Journal article.)

What can a hacker do with your driver's license?

A Social Security number is as bad as it gets in terms of identity theft, but a scammer can do damage with your driver's license too. An imposter can give your license number at a traffic stop, making you liable for the violation. If the ticket goes unpaid long enough, a judge could wind up issuing a bench warrant for your arrest.

Hackers could also use your driver's license to create a synthetic identity. Synthetic identities combine real stolen data from several sources with fake information (your driver's license, say, plus someone else's Social Security number, plus a made-up name or birthdate) and synthetic identity theft occurs when someone uses that persona to commit fraud. Synthetic ID theft is harder to spot than boilerplate identity theft, given it doesn't match anyone's exact credentials.

How to know if your driver's license was stolen during the Equifax hack

How did the identity thieves get access to driver's license data anyway? Well, if you ever disputed your credit report information through Equifax, you may have been asked for your driver's license information to verify your identity. And, as previously disclosed, hackers obtained dispute documents with personal identifying information during the breach.

You can't know for sure if your driver's license was among the 10.9 million that were exposed. (Equifax's breach website lets you know if you were potentially affected but it doesn't list the information on you that might have been pilfered.) But, if you ever filed a dispute with the credit bureau and/or gave them your driver's license number, you should probably change those digits. Which means you probably need to go to the DMV. It's really the only way to make sure your information stays safe going forward.

You may want to also consider a credit freeze. A credit freeze blocks third-parties from checking your credit and keeps hackers from opening fake accounts in your name. Of course, if you want to really prevent any fraudulent activity, you'll probably want to pay for credit freezes at the other major credit bureaus TransUnion and Experian, too. (That's because a third-party could use any of the big three to check your credit, so just freezing your Equifax file leaves you exposed.)

There are also paid identity theft protection or identity theft insurance services out there. Or you can DIY some credit monitoring. Check out our full guide to surviving the Equifax data breach.

Image: chombosan