- Equifax, one of the big three credit reporting agencies, experienced a massive data breach, compromising the personal information of 145 million Americans.
- The stolen information includes names, social security numbers, birth dates, driver's licenses, and addresses.
- Criminals can use this information to open credit cards, purchase homes, open bank accounts, take out car loans, file taxes, and claim dependents.
- Equifax knew about the breach for six weeks before informing the public and three executives sold company stock before the breach was made public.
- Equifax had been alerted by Homeland Security to fix a vulnerability in their software but failed to do so.
- Equifax has a history of breaches and mishandling of sensitive information.
- The breach could have long-lasting consequences for affected individuals.
- Equifax's response to the breach, including creating a website and offering free credit monitoring, has been riddled with mistakes and questionable practices.

- LifeLock purchases credit monitoring services from Equifax and passes some of the revenue back to Equifax
- LifeLock has had issues in the past, including settlements with the FTC and a problematic ad campaign
- Consumer advocates recommend freezing credit with all three major credit reporting companies (Equifax, Experian, TransUnion) as the best solution to the Equifax crisis
- Freezing and unfreezing credit can cost money, which goes back to the credit reporting companies
- Equifax was awarded a $7 million contract by the IRS, leading to criticism and suspension of the deal
- Anger from consumers has little impact on Equifax, as they make most of their money selling data to businesses
- Major reform and regulation of the credit reporting industry is needed in the long term, but freezing credit is the best immediate solution
- PIN numbers are provided when freezing credit, and it is important not to lose them.

John Oliver discusses the massive impact of the cybersecurity breach at Equifax and their massively misguided attempts to mitigate the damage.

Connect with Last Week Tonight online...

Subscribe to the Last Week Tonight YouTube channel for more almost news as it almost happens: www.youtube.com/user/LastWeekTonight

Find Last Week Tonight on Facebook like your mom would: http://Facebook.com/LastWeekTonight

Follow us on Twitter for news about jokes and jokes about news: http://Twitter.com/LastWeekTonight

Visit our official site for all that other stuff at once: http://www.hbo.com/lastweektonight

-♪ ♪ -♪ ♪ Equifax, the company whose name sounds like a theatrical production in which Daniel Radcliffe plays a horse that fucks a fax machine.

Now, Equifax is 1 of the big 3 credit reporting agencies, the companies who keep financial data on all of us, so that people like, lenders and landlords can decide whether or not we are trustworthy.

So, Equifax controls some of our most sensitive information, and about a month ago, we learned this.

Breaking news from a credit monitoring company, Equifax.

Cyber thieves making off with private information of 143 million Americans, nearly half the U.S.

It's now 145 million Americans, and I've got good news and bad news there.

The good news is that by private information, they don't mean your Google search history.

So, nobody yet knows about the time you searched for Wario Porn parentheses real, or world's richest dogs looking for assistance, or Can loneliness cause the farts?

But the bad news is, the information they got could well be all this.

It's your name, social security number, birth date, driver's license, and addresses where you live.

Information that is mostly permanent unless you're in federal witness protection.

Okay, so that does sound bad, but here is a simple solution.

Just move 145 million people into the witness protection program.

That means, Joneses, you are the Thompsons.

Wait, wait, hold on, Joneses, you shouldn't be there.

You should be living in the Joneses' house in Phoenix.

Forget the whole planet was just trying to help!

Some younger people watching this saying, well, hold on, who cares?

We're the first generation to routinely send pictures of our junk to each other over the Internet.

Why should we give a shit about someone seeing our social security numbers?

But you should know, criminals can do a lot more with that number than they can with a picture of your dick.

This information is gonna be sold left and right on

gonna be able to open up credit cards for the rest of your life once they have that information.

They can go out and purchase a home in your name.

They can open bank accounts, take car loans.

Someone who has your Social Security number could actually take a job, they could file taxes, and even claim your kids as dependents and be gone with your refund before you ever actually file a tax return.

No, the tax benefit is the whole point of having children.

Without that, all you're left with is your actual children.

And in any other era, this would have been the biggest news story for a month.

But now that Every Day's headline is simply the words, everything batshit bananas again today, it's slipped under the radar.

But it is worth asking, how the hell did this happen?

Because the short answer is, the people in charge have done literally everything wrong.

And let's start with just the way that Equifax told us about the hack.

In early September, their then CEO, Rick Smith, a man with a face and name so bland, he may as well be called Human Person or Frasier Rerun.

He issued a taped apology, but his remorse seemed a little less than heartfelt.

On July 29th of this year, we discovered that attackers had gained unauthorized access to certain Equifax data files.

This is clearly a disappointing event and 1 that strikes at the heart of who we are and what we do.

Rick Smith is so alarmingly mechanical, you probably have to put him in rice every time he gets wet.

-♪ ♪ -♪ Now, notably, he mentioned there that Equifax learned about the breach on July 29th.

But even more notably, that video was uploaded in September, which is, and this is true, after July.

So, Equifax knew about the breach for nearly 6 weeks before telling the public.

And they claimed that they needed that time because the investigation was complex and time-consuming.

Although, that's not all that happened in that time span.

3 Equifax executives sold nearly 2000000 dollars in company stock days after the data breach was discovered.

Selling stock before the public knows there's a problem is 1 of those things that look suspicious whether or not you're actually doing something wrong.

It's like walking into a petting zoo with a bib on.

What exactly are you planning on messily devouring in there?

And Equifax defended that, saying, none of the executives in question, including their chief financial officer, knew about the data breach.

Which raises another question, how is that even possible?

Did they just ignore emails with the subject lines, -"Breach!

And just spoke to you in person about breach, and you just stared blankly at me, and then said, I'm gonna order from that salad place.

And if you are getting frustrated already with this kind of incompetence, you're gonna need to pace yourself, because this story gets a lot worse.

Apparently, there were multiple points where this hack could have been prevented, and 1 of them is incredible, because Equifax were alerted by Homeland Security back in March that they needed to fix a critical vulnerability in their software.

But as lawmakers discovered at a recent hearing, that's not what happened.

There was 1 person, apparently, who forgot to tell somebody that they had a piece of software that needed to be patched.

Yeah, it is not ideal that a company guarding such valuable information leaves something that important down to 1 person.

It's like finding out that Chase Bank has a big red button labeled, -"Lose Everyone's Money." -$LOSE EVERYONE'S MONEY And the only thing stopping anyone from pushing it is Frank.

I love the guy, but what if he has to pee?

-$LOSE EVERYONE'S MONEY And I want to tell you that this is an anomaly, but Equifax has had multiple headline-grabbing breaches over the years, and that is not even counting smaller incidents like this.

I checked my credit report the other day online with Equifax.

And next thing I know, I have 300 pieces of mail sitting in my mailbox.

Every single 1 of these is addressed to her, but they're not hers.

Instead, she got other people's credit reports.

Now, names, Social security numbers, dates of birth, current and previous addresses, bank and loan account numbers, all stacked up on a kitchen table in Biddeford.

And it really should have set off red flags at Equifax when hundreds of different credit reports were being mailed to the same address.

What exactly did you think had happened there?

That every single fraggle checked their credit at once down at Fraggle Rock?

And I know that other companies have had breaches, but none remotely as damaging as this new Equifax 1.

Because remember, this isn't Target exposing customers' credit cards.

This is compromising social security numbers.

The things that thieves could use to open new credit cards in your name.

And if your information was stolen, which remember, is about a 50-50 chance, it could haunt you forever.

You don't change your birth date, you don't change your social security number.

Those who have been jeopardized by this hack will have to protect themselves for years until they're dead.

There is only 1 other thing that you have to constantly protect yourself from until you're dead, and that's fucking death!

-♪ ♪ -♪ And you would hope that Equifax would do a decent job of mitigating the damage.

After all, they did have nearly 6 weeks to work on a response, but instead, their fuck-ups continued.

For instance, they created a website for concerned consumers to go to, but then this happened.

The site that Equifax started is called Equifax Security 2017.

But a developer named Nick Sweeting wanted to show how easy it is to create a similar fake site, so he did.

Someone created a fake site, And if you're thinking, well, who would be dumb enough to fall for that?

Because they tweeted links to that fake site at least 8 times.

Despite the fact that site had a couple of tiny clues that it might be fake, from the headline reading, Why Did Equifax Use a Domain That's So Easily Impersonated by Phishing Sites?

To the fact that when you clicked on their frequently asked questions, this happened.

Never gonna let you down ♪ -♪ 00000000 ♪ -♪ Never gonna run around and desert you

Equifax says that they are tightening up their operation, and to see how well that they've done on that, you can just go to EquifaxFraudPrevention.com, not because it's their site, but because it's our site.

We bought it 2 days ago, and if you go there, you'll find the message, how are we still able to do this?

But wait, wait, because There is even more.

Because Equifax also offered consumers a year of free credit monitoring.

But when people tried to sign up for the service, they noted something.

You lock into Equifax terms of service when you sign up for it, which means that you can't sue the company.

You've got to resolve any disputes in forced arbitration.

So legally, your best recourse at that point would be shaking your fist to the heavens while shouting, -"Equifax!" -...

Now, they've since rescinded that clause, although many frustrated people are now signing up for third-party credit monitoring services like LifeLock, who've been advertising everywhere.

And they have seen a real surge in business in the wake of this breach.

Although, if you are considering LifeLock because you are mad at Equifax, there is something you're gonna need to know.

According to filings with the SEC, LifeLock purchases credit monitoring services from Equifax.

And that means someone buys credit monitoring through LifeLock.

LifeLock turns around and passes some of that revenue directly along to Equifax.

Some of the money that you pay to LifeLock goes right back to fucking Equifax, which could only be more infuriating if you then found out that the rest of it goes to Toys for Todd's, a charity that purchases sex toys for grown men named Todd.

And look, Equifax connections aside, LifeLock has had repeated issues itself, including settlements with the FTC and a truly disastrous ad campaign a few years

I'm Todd Davis, and I'm here to prove just how safe your identity can be with LifeLock.

Yeah, LifeLock's then-CEO, Todd Davis, actually put his real Social Security number, 457-55-5462, on a truck and billboards.

For a time, it was impossible to escape his Social Security number, 457555462.

And that was a very cocky move, and 1 that resulted in him having his identity stolen 13 times.

And I'm guessing that the defense for the people who took it was, I didn't steal his identity, I literally got it off the back of a truck.

So to put it mildly, LifeLock may not be your best solution to the Equifax crisis, which brings us to the question, what is?

Well, consumer advocates told us that the 1 big step everyone should take is to go to all 3 large credit reporting companies, that's Equifax, Experian, and TransUnion, and freeze your credit.

That way, no 1 can access it, including you, until you unfreeze it.

Now, the companies also offer their own credit protection products, with names like Trusted ID or Credit Lock Plus.

But, they are often more expensive and offer fewer consumer protections.

So, if you need a way to remember this, locks are something you don't want.

Think of this tiny penguin losing its frozen mind.

Freezing and unfreezing your credit can cost money, which will go back to these companies, because seemingly, they just can't fucking lose on this.

And if you need any more proof of that, on the very same day the Congress was yelling at Equifax's former CEO, it emerged that the company had just been awarded a 7000000 dollar contract by the IRS to prevent fraud.

Which led 1 senator to make a pretty brutal comparison.

You realize to many Americans right now that looks like, we're giving Lindsey Lohan the keys to the minibar.

That was the pause of a man thinking, -"Do I let that pass?" -$25,000.

Do I correct him on how to pronounce Lohan?

Or do I double down and pronounce her name Lingenberry Lahoney-Baloney?

And you should know, you should know that IRS deal has been suspended.

Not canceled, by the way, just suspended.

And that might make you angry, but the problem is that anger won't have much impact on Equifax, because they make most of their money selling our data to businesses, like banks.

So in their eyes, we are not the consumer with a product.

To think of it in terms of KFC, we are not the guy buying the 10-piece buckets with the fucking chickens.

So for the time being, businesses are the only ones who can exert influence here, and as 1 colorfully dressed expert pointed out, that's not gonna happen anytime soon.

I haven't heard any big company come out yet and say, we're not gonna use Equifax anymore for their credit scores.

So far, everybody's been quiet, and I don't know what they're waiting to hear.

They should be done, but I bet you, because it's America, they'll be okay.

That angry, business casual farm animal on Fox Business is talking sense.

And that sentence alone shows just how bad things are.

So in the long term, there should clearly be major reform to this industry and how it's regulated.

But that is going to take time, so until then, you need to freeze your credit reports with all 3 of these companies, and only unfreeze them when you need to apply for credit.

And because the freeze option can be hard to find on their sites, if you go to our Twitter feed, we will give you the exact links to do that.

And when you do, they will give you a PIN number that you need to unfreeze it.

So do not lose that number, or at the very least, make it something memorable.

But not that, because of course, that's Todd Davis' Social Security number.


Speaker 0: -♪ ♪ -♪ ♪ Equifax, the company whose name sounds like a theatrical production in which Daniel Radcliffe plays a horse that fucks a fax machine. Now, Equifax is 1 of the big 3 credit reporting agencies, the companies who keep financial data on all of us, so that people like, lenders and landlords can decide whether or not we are trustworthy. So, Equifax controls some of our most sensitive information, and about a month ago, we learned this.

Speaker 1: Breaking news from a credit monitoring company, Equifax. Cyber thieves making off with private information of 143 million Americans, nearly half the U.S. Population.

Speaker 0: It's actually worse. It's now 145 million Americans, and I've got good news and bad news there. The good news is that by private information, they don't mean your Google search history. So, nobody yet knows about the time you searched for Wario Porn parentheses real, or world's richest dogs looking for assistance, or Can loneliness cause the farts? But the bad news is, the information they got could well be all this.

Speaker 2: It's your name, social security number, birth date, driver's license, and addresses where you live. Information that is mostly permanent unless you're in federal witness protection.

Speaker 0: Wow. Okay, so that does sound bad, but here is a simple solution. Just move 145 million people into the witness protection program. That means, Joneses, you are the Thompsons. Thompsons, you're the Campbells.

Campbells, you're the Mendozes. Mendozes, you're the Joneses. Wait, wait, hold on, Joneses, you shouldn't be there. I made you the Thompsons. No, Thompsons, I made you the Campbells.

Campbells, you're the Mendozes. Mendozes, why are you there? You should be living in the Joneses' house in Phoenix. Oh, no, I shouldn't have said Phoenix. Oh, no, I shouldn't have said Phoenix.

Oh, God!

Speaker 2: The judges are dead! The judges are dead! Forget the whole planet was just trying to help! I'm sorry for trying! Oh, they're dead!

-...and I

Speaker 0: know... -...and I know... I know there might be... Some younger people watching this saying, well, hold on, who cares? We're the first generation to routinely send pictures of our junk to each other over the Internet.

Why should we give a shit about someone seeing our social security numbers? But you should know, criminals can do a lot more with that number than they can with a picture of your dick.

Speaker 2: This information is gonna be sold left and right on

Speaker 3: the black market. People are

Speaker 2: gonna be able to open up credit cards for the rest of your life once they have that information.

Speaker 4: They can go out and purchase a home in your name. They can open bank accounts, take car loans.

Speaker 5: Someone who has your Social Security number could actually take a job, they could file taxes, and even claim your kids as dependents and be gone with your refund before you ever actually file a tax return.

Speaker 0: No, no! No, the tax benefit is the whole point of having children. Without that, all you're left with is your actual children. Which, you know, ugh. The point here is, it's a huge problem.

And in any other era, this would have been the biggest news story for a month. But now that Every Day's headline is simply the words, everything batshit bananas again today, it's slipped under the radar. But it is worth asking, how the hell did this happen? Because the short answer is, the people in charge have done literally everything wrong. And let's start with just the way that Equifax told us about the hack.

In early September, their then CEO, Rick Smith, a man with a face and name so bland, he may as well be called Human Person or Frasier Rerun. He issued a taped apology, but his remorse seemed a little less than heartfelt.

Speaker 6: On July 29th of this year, we discovered that attackers had gained unauthorized access to certain Equifax data files. This is clearly a disappointing event and 1 that strikes at the heart of who we are and what we do. Holy shit!

Speaker 0: Rick Smith is so alarmingly mechanical, you probably have to put him in rice every time he gets wet. -♪ ♪ -♪ Now, notably, he mentioned there that Equifax learned about the breach on July 29th. But even more notably, that video was uploaded in September, which is, and this is true, after July. So, Equifax knew about the breach for nearly 6 weeks before telling the public. And they claimed that they needed that time because the investigation was complex and time-consuming.

Although, that's not all that happened in that time span.

Speaker 7: 3 Equifax executives sold nearly 2000000 dollars in company stock days after the data breach was discovered.

Speaker 0: Wow. Selling stock before the public knows there's a problem is 1 of those things that look suspicious whether or not you're actually doing something wrong. It's like walking into a petting zoo with a bib on. What exactly are you planning on messily devouring in there? And Equifax defended that, saying, none of the executives in question, including their chief financial officer, knew about the data breach.

Which raises another question, how is that even possible? Did they just ignore emails with the subject lines, -"Breach! Following up on breach!" -$BREACH! Where the fuck are you? Breach, breach, breach!

And just spoke to you in person about breach, and you just stared blankly at me, and then said, I'm gonna order from that salad place. And if you are getting frustrated already with this kind of incompetence, you're gonna need to pace yourself, because this story gets a lot worse. Apparently, there were multiple points where this hack could have been prevented, and 1 of them is incredible, because Equifax were alerted by Homeland Security back in March that they needed to fix a critical vulnerability in their software. But as lawmakers discovered at a recent hearing, that's not what happened.

Speaker 5: There was 1 person, apparently, who forgot to tell somebody that they had a piece of software that needed to be patched.

Speaker 0: Yeah, it is not ideal that a company guarding such valuable information leaves something that important down to 1 person. It's like finding out that Chase Bank has a big red button labeled, -"Lose Everyone's Money." -$LOSE EVERYONE'S MONEY And the only thing stopping anyone from pushing it is Frank. And look, I love Frank. I love the guy, but what if he has to pee? -$LOSE EVERYONE'S MONEY And I want to tell you that this is an anomaly, but Equifax has had multiple headline-grabbing breaches over the years, and that is not even counting smaller incidents like this.

Speaker 3: I checked my credit report the other day online with Equifax. That was it. And next thing I know, I have 300 pieces of mail sitting in my mailbox.

Speaker 8: Every single 1 of these is addressed to her, but they're not hers. Instead, she got other people's credit reports. Now, names, Social security numbers, dates of birth, current and previous addresses, bank and loan account numbers, all stacked up on a kitchen table in Biddeford.

Speaker 0: Yeah, I mean, that's not great, is it? And it really should have set off red flags at Equifax when hundreds of different credit reports were being mailed to the same address. What exactly did you think had happened there? That every single fraggle checked their credit at once down at Fraggle Rock? Down at Fraggle Rock.

Now, very nice. And... And I know that other companies have had breaches, but none remotely as damaging as this new Equifax 1. Because remember, this isn't Target exposing customers' credit cards. This is compromising social security numbers.

The things that thieves could use to open new credit cards in your name. And if your information was stolen, which remember, is about a 50-50 chance, it could haunt you forever.

Speaker 4: You don't change your birth date, you don't change your social security number. Those who have been jeopardized by this hack will have to protect themselves for years until they're dead.

Speaker 0: It's true, and just think about that. There is only 1 other thing that you have to constantly protect yourself from until you're dead, and that's fucking death! -♪ ♪ -♪ And you would hope that Equifax would do a decent job of mitigating the damage. After all, they did have nearly 6 weeks to work on a response, but instead, their fuck-ups continued. For instance, they created a website for concerned consumers to go to, but then this happened.

Speaker 9: The site that Equifax started is called Equifax Security 2017. But a developer named Nick Sweeting wanted to show how easy it is to create a similar fake site, so he did. He called it Security Equifax 2017.

Speaker 0: Exactly. Someone created a fake site, And if you're thinking, well, who would be dumb enough to fall for that? Equifax, that's who. Because they tweeted links to that fake site at least 8 times. Despite the fact that site had a couple of tiny clues that it might be fake, from the headline reading, Why Did Equifax Use a Domain That's So Easily Impersonated by Phishing Sites?

To the fact that when you clicked on their frequently asked questions, this happened. -♪ Never gonna give you up ♪ -♪

Speaker 2: 0000000

Speaker 0: ♪ -♪

Speaker 2: Never gonna let you down ♪ -♪ 00000000 ♪ -♪ Never gonna run around and desert you

Speaker 0: ♪ Well played, pranksters. You have my respect. But look, don't worry. Equifax says that they are tightening up their operation, and to see how well that they've done on that, you can just go to EquifaxFraudPrevention.com, not because it's their site, but because it's our site. We bought it 2 days ago, and if you go there, you'll find the message, how are we still able to do this?

Why haven't you learned anything? But wait, wait, because There is even more. Because Equifax also offered consumers a year of free credit monitoring. But when people tried to sign up for the service, they noted something.

Speaker 7: Guess what? You lock into Equifax terms of service when you sign up for it, which means that you can't sue the company. You've got to resolve any disputes in forced arbitration.

Speaker 0: Exactly. You'd be giving up your right to sue. So legally, your best recourse at that point would be shaking your fist to the heavens while shouting, -"Equifax!" -... -... Now, they've since rescinded that clause, although many frustrated people are now signing up for third-party credit monitoring services like LifeLock, who've been advertising everywhere.

And they have seen a real surge in business in the wake of this breach. Although, if you are considering LifeLock because you are mad at Equifax, there is something you're gonna need to know.

Speaker 10: According to filings with the SEC, LifeLock purchases credit monitoring services from Equifax. And that means someone buys credit monitoring through LifeLock. LifeLock turns around and passes some of that revenue directly along to Equifax. Is that right, Mr. Smith?

Speaker 6: That is correct.

Speaker 2: Oh, my God. It's... It's...

Speaker 0: It's true. Some of... Some of the money that you pay to LifeLock goes right back to fucking Equifax, which could only be more infuriating if you then found out that the rest of it goes to Toys for Todd's, a charity that purchases sex toys for grown men named Todd. Buy your own sex toys, Todd! We can't carry you on this 1!

And look, Equifax connections aside, LifeLock has had repeated issues itself, including settlements with the FTC and a truly disastrous ad campaign a few years

Speaker 11: back. I'm Todd Davis, and I'm here to prove just how safe your identity can be with LifeLock. That's my real Social Security number.

Speaker 0: Yeah, LifeLock's then-CEO, Todd Davis, actually put his real Social Security number, 457-55-5462, on a truck and billboards. For a time, it was impossible to escape his Social Security number, 457555462. And that was a very cocky move, and 1 that resulted in him having his identity stolen 13 times. And I'm guessing that the defense for the people who took it was, I didn't steal his identity, I literally got it off the back of a truck. So to put it mildly, LifeLock may not be your best solution to the Equifax crisis, which brings us to the question, what is?

Well, consumer advocates told us that the 1 big step everyone should take is to go to all 3 large credit reporting companies, that's Equifax, Experian, and TransUnion, and freeze your credit. That way, no 1 can access it, including you, until you unfreeze it. Now, the companies also offer their own credit protection products, with names like Trusted ID or Credit Lock Plus. But, they are often more expensive and offer fewer consumer protections. So, if you need a way to remember this, locks are something you don't want.

Think of Justin Bieber's dreadlocks. A terrible decision to be avoided. Whereas freezes are great. Think of this tiny penguin losing its frozen mind. ♪ ♪ See?

So to recap, locks, oof. Freezes, wee! Now, now, here's the thing. Here's the thing on this. Freezing and unfreezing your credit can cost money, which will go back to these companies, because seemingly, they just can't fucking lose on this.

And if you need any more proof of that, on the very same day the Congress was yelling at Equifax's former CEO, it emerged that the company had just been awarded a 7000000 dollar contract by the IRS to prevent fraud. Which led 1 senator to make a pretty brutal comparison.

Speaker 12: You realize to many Americans right now that looks like, we're giving Lindsey Lohan the keys to the minibar. -...to the minibar. -...to the minibar. -...to the minibar. -...to

Speaker 2: the minibar.

Speaker 6: I understand your point.

Speaker 0: That was the pause of a man thinking, -"Do I let that pass?" -$25,000. Do I correct him on how to pronounce Lohan? Or do I double down and pronounce her name Lingenberry Lahoney-Baloney? And you should know, you should know that IRS deal has been suspended. Not canceled, by the way, just suspended.

And that might make you angry, but the problem is that anger won't have much impact on Equifax, because they make most of their money selling our data to businesses, like banks. So in their eyes, we are not the consumer with a product. To think of it in terms of KFC, we are not the guy buying the 10-piece buckets with the fucking chickens. So for the time being, businesses are the only ones who can exert influence here, and as 1 colorfully dressed expert pointed out, that's not gonna happen anytime soon.

Speaker 1: I haven't heard any big company come out yet and say, we're not gonna use Equifax anymore for their credit scores. So far, everybody's been quiet, and I don't know what they're waiting to hear. This is outrageous. They should be done, but I bet you, because it's America, they'll be okay.

Speaker 0: Here's the truth. That angry, business casual farm animal on Fox Business is talking sense. And that sentence alone shows just how bad things are. So in the long term, there should clearly be major reform to this industry and how it's regulated. But that is going to take time, so until then, you need to freeze your credit reports with all 3 of these companies, and only unfreeze them when you need to apply for credit.

And because the freeze option can be hard to find on their sites, if you go to our Twitter feed, we will give you the exact links to do that. And when you do, they will give you a PIN number that you need to unfreeze it. So do not lose that number, or at the very least, make it something memorable. I don't know, like... 457555462.

But not that, because of course, that's Todd Davis' Social Security number.

See all LastWeekTonight transcripts on Youtube

Equifax: Last Week Tonight with John Oliver (HBO)