As a result of ongoing analysis of data stolen in last year’s cybersecurity incident, Equifax announced that the company has confirmed the identities of U.S. consumers whose partial driver’s license information was taken. We were able to identify these consumers by referencing other information in proprietary company records that the attackers did not steal, and by engaging the resources of an external data provider.

There has NOT been an additional incident. This update is based on additional findings from the cybersecurity incident announced September 7, 2017.

Through these additional efforts, Equifax was able to identify 2.4 million U.S. consumers whose partial driver’s license information was stolen, but who were not in the previously identified affected population. This information was partial because, in the vast majority of cases, it did not include consumers’ home addresses, or their respective driver’s license states, dates of issuance, or expiration dates.

Equifax will notify these consumers by U.S. Postal mail, and will offer identity theft protection and credit file monitoring services at no cost to them. Information about registering for these services will be included in the mail communication.

Consumers who have been impacted by the March 1, 2018 announcement will be notified by U.S. Postal mail. The Equifax customer care team will NOT be able to tell you if you’ve been impacted. Additionally, the “Am I Impacted” tool on this site does not reflect consumers who have been impacted by the March 1 announcement.

For all other consumers, if you have a U.S. Social Security number, you can see if your personal information has been impacted by cybersecurity incident by clicking the “Am I Impacted” tool on this website.