Target’s Credit-Monitoring Offer Not Enough to Protect Consumers, Experts Say

It was the data breach that shook the retail world.

When Target Corp. announced in December that 110 million of its customers’ payment and personal records had been breached, the news was unsettling – both because Target is such an iconic brand and because the breach was so invasive.

“Target really demonstrated there are now three certainties in life: death, taxes and breaches,” said Adam Levin, chairman of Identity Theft 911, a company that provides identity-theft recovery and other services.

Target certainly isn’t the only retailer to have been hit – Michaels, Neiman Marcus and most recently Sally Beauty Supply have reported exposure of customer data – but it’s definitely among the biggest ever. According to Minneapolis-based Target, about 40 million customers’ debit- and credit-card information was exposed, as well as 70 million customers’ phone numbers, mail and email addresses.

In the aftermath, thousands of Americans had their credit or debit cards canceled by banks and credit unions.

Target has been busily doing damage control, issuing major apologies, testifying before Congress and contributing $5 million to a nationwide cybersecurity campaign. The company’s profits plunged as wary consumers stayed away, and Target still faces dozens of lawsuits by banks and others.

Perhaps most importantly, Target has been working to quell anxieties and rebuild the confidence of its shoppers. In its biggest mea culpa, the company has offered Target customers free credit monitoring for a year. But the deadline is fast approaching. Consumers have until April 23 to get signed up for the free offer.

“Target understands some guests are nervous about the impact the recent data breach may have on them. We are offering this product in order to ease all guest concerns and provide peace of mind,” said Target spokeswoman Sarah Van Nevel, in an email.

The free service is not limited to customers who shopped during the apparent data-breach period, which Target initially identified as between Nov. 27 and December 15. Instead, the free credit monitoring is open to “anyone who shopped at Target.” Ever.

With about 1,800 U.S. stores and millions of customers, the potential number of sign-ups is enormous. Target said it does not have specific numbers on how many customers have signed up so far, but the offer “has been very well-received by Target’s guests,” said Van Nevel.

If you share a credit card with a spouse, both of you can sign up individually for free credit monitoring, which is provided by ProtectMyID, a subsidiary of Experian, one of the country’s three main credit-reporting bureaus. You’ll get an alert any time there’s a change to your credit report, including newly opened accounts, new credit inquiries and new negative information, such as payment delinquencies. The offer also includes:

• A free copy of your credit report by Experian.
• Identity theft help. If confirmed as a victim of identity theft, you’re assigned a “fraud resolution agent” to walk you through the resolution process and answer step-by-step questions.
• Identity theft insurance: Victims are covered for certain costs, such as lost wages, private-investigator fees and unauthorized electronic fund transfers.
• Target’s credit monitoring is good for 12 months; after that, consumers can choose whether to continue the service on a paid basis.

You can apply at http://www.target.com/databreach until April 23. You’ll be given an authorization code, which you type in at ProtectMyID.com. The sign-up must be completed before April 30. To ensure the credit monitoring goes to the correct account, you’ll be asked to provide your name and Social Security number. Target says it will not have access to any customers’ Social Security numbers.

But for those who sign up, it’s no guarantee that cybercrooks won’t steal your identity and wreak financial havoc in other ways, such as using stolen credit/debit card info to siphon money from your accounts.

“The service Target is giving away only monitors one of your three credit reports, which is like locking one of the three doors to your house,” said John Ulzheimer, a longtime identity-theft and credit-reporting expert who writes for Mint.com and CreditSesame.com.

Credit monitoring is effective only when someone is using your personal information to apply for new accounts, such as car loans or credit cards, said Ulzheimer. “And in that case, the consumer better hope the lender pulls their Experian credit report or the free credit-monitoring service won’t set off any alarms.”

Target’s free credit monitoring applies only to a consumer’s Experian credit reports, not those of Equifax or TransUnion, noted Ulzheimer, who previously worked for Equifax.

Levin, the identity-theft expert, said there are lots of other tools for consumers to protect themselves. Among them:

• Get free copies of your credit reports once a year from each of the three credit-reporting bureaus (Experian, Equifax and TransUnion) by calling 877-322-8228 or going to http://www.annualcreditreport.com.
• Visit sites where you can obtain a free credit score, such as Credit.com, CreditKarma.com, Quizzle.com or CreditSesame.com.
• Check your bank and credit-card statements routinely, daily if possible. It only takes a few minutes, but it is an easy way to spot fraudulent charges.
• Ask your bank or credit union about “transactional monitoring,” where they notify you by email or text whenever a transaction is unusual or occurs above a certain amount. Many credit-card issuers already do this automatically.