Experian
One of the three major U.S. consumer credit bureaus, Experian holds credit data on more than 220 million U.S. consumers and sells reports to lenders, employers, landlords, and insurers. Consumers are involuntary participants with no ability to opt out. Experian also operates one of the most aggressive consumer-facing subscription businesses among the Big Three and has expanded heavily into marketing data, audience targeting, and identity services. The CFPB sued Experian in January 2025 for 'sham investigations' of credit report errors.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated. Last assessed 2026-09-27. Score revised 2026-09-27: 74 → 75.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
TRW bought Credit Data Corporation in 1968 and built the largest U.S. credit bureau, holding files on about 90 million Americans by the mid-1980s. The 1970 FCRA gave consumers basic dispute rights, but mixed files and errors were common, as shown by the 1991 FTC consent order and the Norwich, Vermont tax-lien error. A 1993 amendment to the order opened credit-header data to target marketing. Consumers had no way to freeze or remove their files.
TRW sold its credit unit to Bain Capital and Thomas H. Lee, which named it Experian and resold it within weeks to GUS, which merged it with UK bureau CCN. Experian added direct marketer Metromail and expanded consumer data marketing. The FTC penalized it in 2000 for blocking consumer calls, and after FACTA created free annual reports, its freecreditreport.com used 'free report' ads to enroll consumers in paid monitoring, leading to a 2005 FTC settlement.
Experian demerged from GUS and listed on the London Stock Exchange, then expanded quickly: Hitwise's web-behavior data and a $1.2 billion controlling stake in Brazil's Serasa in 2007 gave it three of the world's top five bureaus. The FTC penalized it again in 2007 for violating the 2005 freecreditreport.com order, a $45 million class settlement (2009) addressed discharged-debt misreporting, and the FTC's 2012 study found one in five consumers had report errors. CFPB supervision began in 2012, the same year Experian unknowingly acquired an identity thief's access through Court Ventures.
Experian's security failures became public: revelations from late 2013 showed that an identity thief had used the Court Ventures acquisition to reach records on 200 million Americans, and a 2015 breach exposed 15 million T-Mobile applicants. States pushed back with a Mississippi lawsuit and 2015 settlements with New York and 31 states requiring dispute and medical-debt reforms. The CFPB fined Experian $3 million in 2017 for deceptive score marketing. Experian bought Passport Health's healthcare payment data for $850 million, and free credit freezes became law in 2018.
Weeks after abandoning the ClearScore takeover under CMA pressure, Experian launched Boost, drawing consumers into bank-linked accounts that feed its consumer marketplace. The $280 million Tapad deal (2020) added cross-device ad tracking. The UK ICO ordered changes to its marketing data-broking, and security lapses continued with the 2020 South Africa incident and a 2021 API that exposed credit scores. The bureaus' complaint relief collapsed across 2019-2021.
A January 2022 CFPB report showing the bureaus' complaint relief had fallen from 25% to under 2% opened a period of heavy federal scrutiny. It brought medical-debt reporting changes, 40-state settlements that found Experian Data Corp had not notified Court Ventures victims, an FTC CAN-SPAM penalty (2023), the CFPB Director's attack on rising report and score prices (2024), and finally the January 2025 'sham investigations' suit. Experian kept expanding its data businesses (illion, Audigent) and resisted regulators, winning most of its UK appeal against the ICO, while a late-2022 authentication bypass exposed full credit reports for 47 days.
Acting director Russell Vought's February 2025 order halting CFPB supervision and enforcement removed the main check on bureau dispute handling. Experian's relief rate on CFPB complaints fell from nearly 20% in 2024 to under 1% in 2025, and in 2026 the CFPB began steering complaints back to the bureaus. The sham-investigations suit survived three motions to dismiss but moves slowly. Experian posted a record FY26, announced two $1 billion buybacks, and resellers reported further Experian price increases on mortgage reports, while the 2025 trigger-lead law and FICO's direct licensing added modest counterweights.
Alternatives
The federally mandated site for free credit reports from all three bureaus (Experian, Equifax, TransUnion), available weekly since the program was made permanent in 2023. No subscription, no payment, no credit score. Use it to check your Experian file for errors without paying Experian, and pair it with a free credit freeze instead of the paid CreditLock. The catch: it is a report snapshot, not ongoing monitoring, and the site is run jointly by the three bureaus, so you are handed off to Experian's own website to verify your identity and view that report.
Free alternative to Experian's paid monthly memberships: weekly-updated VantageScore 3.0 scores and reports from TransUnion and Equifax, with alerts when your reports change. Easy switch: just sign up. Caveats: it doesn't use Experian data, so your Experian report still needs a separate free pull from AnnualCreditReport.com; it is ad-supported and recommends financial products; and in 2023 the FTC finalized a $3 million order over its misleading 'pre-approved' credit card offers.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (68 events)
TRW acquires Credit Data Corporation
TRW Inc. acquired Credit Data Corporation and renamed it TRW Information Services. This marked the beginning of the automated credit reporting business that would eventually become Experian; by the mid-1980s TRW held credit histories on roughly 90 million Americans and was the largest U.S. credit reporting agency.
Fair Credit Reporting Act becomes law
Congress passed the FCRA, the nation's first consumer financial privacy statute, to promote the accuracy and privacy of information held by consumer reporting agencies. Before the law, investigatory reports could include neighbors' gossip about a person's drinking habits and morals, and agencies did not have to tell consumers that a report on them existed (Minnesota Law Review, 1972); EPIC's history of the law says investigators even fabricated negative information. The law established basic rights to see and dispute one's file and limited access to those with a permissible purpose, but enforcement was weak: the FTC could not seek civil penalties for FCRA violations until 1996.
TRW incorrectly flags 1,400 Vermont consumers
A worker for a TRW subcontractor recorded the names of Norwich, Vermont residents who had paid their property taxes (about 1,400 people) as tax delinquents, and some were denied credit. TRW first called it an isolated incident, but as similar cases surfaced across New England it deleted all local tax data from consumer files in Vermont, Rhode Island, Maine and New Hampshire. TRW settled the resulting state cases with a December 1991 consent decree.
FTC consent decree against TRW for mixed files and inaccuracies
The FTC and TRW entered a consent order requiring TRW to maintain reasonable procedures to prevent 'mixed files', where data from different consumers was merged into a single report, and to implement system changes to prevent their recurrence by July 31, 1992. In the early 1990s credit bureau problems led all categories of complaints to the FTC, and a U.S. PIRG review found 44% involved mixed files. TRW did not admit wrongdoing.
e-OSCAR automated dispute system created
Experian, Equifax and TransUnion developed an automated dispute-processing system, later known as e-OSCAR (Online Solution for Complete and Accurate Reporting), to relay consumer disputes to furnishers. NCLC's 2009 'Automated Injustice' report found the system converts often-detailed dispute letters into a two- or three-digit code with at most a few lines of text, and that bureau employees testified to quotas of one dispute every four to six minutes. Consumer advocates argue this design strips context and evidence from disputes, undermining the FCRA's investigation requirements.
Amended FTC order lets TRW use credit-header data for target marketing
An order amending TRW's 1991 FTC consent decree (N.D. Tex., Jan. 14, 1993) allowed credit-header information drawn from the credit database, such as name, address, age, Social Security number and telephone number, to be used in target marketing lists offered to marketers. The ruling opened a path for the bureau to monetize identifying data from its credit files for marketing, a line of business Experian later expanded through direct-marketing acquisitions such as Metromail.
Consumer Credit Reporting Reform Act strengthens FCRA
Congress passed comprehensive amendments to the FCRA in the Consumer Credit Reporting Reform Act of 1996, tightening accuracy requirements, expanding consumer rights to dispute information, and establishing clearer obligations for data furnishers. However, the amendments also broadly preempted state consumer protection laws, limiting states' ability to enact stronger protections than federal FCRA.
GUS creates Experian brand from TRW and CCN merger
TRW sold its Information Services unit to Bain Capital and Thomas H. Lee Partners, which renamed it Experian and immediately resold it to GUS plc (The Great Universal Stores). GUS merged its UK credit information business CCN into Experian, creating a transatlantic credit bureau. This consolidated credit reporting infrastructure across the US and UK under a single corporate entity.
Experian buys direct marketer Metromail
Under GUS ownership, Experian bought direct-marketing firms Metromail and Direct Marketing Technology, turning its consumer files into a large marketing-list and database-marketing business alongside credit reporting. In 1998 it also launched CircBase, a publisher co-op database combining magazine subscriber lists with catalog purchase data covering over 70 million households.
FTC settles with Big Three for $2.5M over blocking consumer calls
Experian, Equifax, and TransUnion agreed to pay a combined $2.5 million to settle FTC charges that they violated the FCRA by failing to maintain accessible toll-free phone numbers. Since September 1997, over one million calls to Experian's toll-free number received busy signals or messages that all representatives were busy. Experian paid $1 million of the total and agreed to maintain blocked call rates under 10% and average hold times under 3.5 minutes. The case demonstrated how the bureaus systematically obstructed consumer access to dispute their own credit reports.
Congress passes FACTA, creating AnnualCreditReport.com
The Fair and Accurate Credit Transactions Act (FACTA) required each nationwide bureau to provide consumers one free credit report per year through a centralized source, which became AnnualCreditReport.com. Consumers seeking their free reports were soon diverted: by mid-2005 the World Privacy Forum counted 233 look-alike domain names, 112 of them live and routing consumers away from the official site, and the FTC later charged Experian's own subsidiary with using 'free credit report' advertising to sell paid monitoring.
FTC settles charges over deceptive freecreditreport.com
ConsumerInfo.com (Experian Consumer Direct, an Experian subsidiary) settled FTC charges that it deceptively marketed 'free credit reports' at freecreditreport.com without adequately disclosing that consumers would automatically be enrolled in a credit monitoring service and charged a $79.95 annual membership unless they cancelled within 30 days. The company gave up $950,000 in ill-gotten gains, agreed to pay redress, and was barred from deceptive 'free' claims. Forbes called it a 'fine print' case: the charge was disclosed only in small print, which Experian said appeared above the final submit button.
Bureaus co-create VantageScore model
Experian, Equifax, and TransUnion jointly created VantageScore Solutions LLC, launching a competing credit scoring model. VantageScore added yet another layer of scoring opacity alongside FICO's proliferating versions. Because VantageScore uses the bureaus' own data and the bureaus own the company, it effectively allowed them to capture scoring revenue previously flowing to FICO while adding consumer confusion about which score matters.
Experian demerges from GUS, lists on London Stock Exchange
Experian became an independent publicly traded company on the London Stock Exchange with an initial share price of 5.60 GBP, after demerging from GUS plc. Independence gave Experian direct access to capital markets and created shareholder pressure for revenue growth and margin expansion, intensifying incentives to monetize consumer data through expanded product lines and acquisitions.
Experian settles second FTC action over freecreditreport.com
ConsumerInfo.com (Experian subsidiary) paid an additional $300,000 to settle new FTC charges that it continued running deceptive 'free credit report' ads that failed to adequately disclose the automatic $79.95 credit monitoring enrollment. This was a violation of the 2005 consent order, demonstrating that Experian continued the deceptive marketing practice despite the prior settlement.
Experian acquires Hitwise for $240M for web behavioral tracking
Experian acquired Hitwise, an internet marketing intelligence company, for about $240 million. Hitwise collected and aggregated ISP data on how over 25 million consumers used the internet across the US, UK, Australia and Asia Pacific, reporting on nearly a million websites daily. The acquisition extended Experian's data business from offline credit data into online behavioral data for advertisers. Experian sold Hitwise and Simmons in December 2015 for a combined $46.5 million plus a potential $5 million earnout, saying the businesses provided 'limited synergies' with the group's core businesses.
Experian acquires Serasa for $1.2 billion
Experian acquired a 65% stake in Serasa, Brazil's market-leading credit bureau with approximately 60% market share, for $1.2 billion. The stake later grew to 100%. Following the acquisition, Experian controlled three of the top five credit bureaus worldwide (US, UK, and Brazil), cementing its global oligopoly position in credit reporting.
State credit freeze fees generate revenue from consumer security needs
Before federal legislation mandated free freezes in 2018, consumers who wanted to restrict access to their credit files had to pay $5-10 per bureau per freeze and per thaw action. A California consumer paid $10 to each of three bureaus ($30 total) to freeze, and another $30 to thaw. Most states set fees between $5 and $20 per action. This created a perverse revenue stream where bureaus profited from consumers' desire to protect themselves against the bureaus' own data vulnerabilities, while making security protection financially burdensome for lower-income consumers most vulnerable to identity theft.
$45 million class action settlement over bankruptcy reporting
Experian, TransUnion and Equifax agreed to a $45 million settlement ($15 million each) of the White v. Experian class action, which alleged the bureaus kept reporting debts as outstanding after they had been discharged in Chapter 7 bankruptcy and failed to investigate consumers' disputes. An earlier injunctive settlement required retroactive correction of discharged-debt reporting; the court approved the monetary settlement in 2011.
VantageScore 2.0 deepens scoring model fragmentation
The bureau-owned VantageScore Solutions released VantageScore 2.0, keeping the non-standard 501-990 scale and letter grades that differed from FICO's 300-850 range. Consumers accessing their credit could encounter multiple scoring models (FICO versions, VantageScore and bureau-branded educational scores), each producing different numbers from the same underlying data.
FTC tightens 'free credit report' ad rule after CARD Act
Acting on the Credit CARD Act of 2009, the FTC amended its Free Credit Reports Rule to require prominent disclosures in ads for 'free credit reports' that the only authorized free source is AnnualCreditReport.com. The rule, effective April 2010, targeted the kind of 'free report' marketing that funneled consumers into paid monitoring, as Experian's freecreditreport.com had done.
Experian acquires Court Ventures, inheriting identity theft access
Experian acquired Court Ventures, a public records database company, for its court records data. Unknown to Experian at the time, a Vietnamese identity thief named Hieu Minh Ngo had been posing as a private investigator to access the system since 2007. After the acquisition, Ngo continued accessing Experian's consumer data for nearly ten months, with his customers making approximately 3.1 million queries on Americans' Social Security numbers, dates of birth, and addresses.
CFPB brings Experian under federal supervision
The CFPB adopted a rule to supervise larger consumer reporting agencies, including Experian, beginning September 30, 2012 — the first time the credit reporting market was subject to federal supervision. The Bureau also began accepting credit reporting complaints, which later became its most-complained-about category.
FTC study finds 1 in 5 consumers have credit report errors
The Federal Trade Commission published a landmark study finding that 1 in 5 consumers had a verified error on at least one of their credit reports, with 5% having errors severe enough to affect the interest rates they would receive. The study demonstrated systemic accuracy failures across the bureau industry, not just occasional mistakes, and became a foundational reference for consumer advocacy against bureau practices.
Experian acquires Passport Health Communications for $850M
Experian completed the $850 million purchase of Passport Health Communications, a revenue-cycle company whose products were sold to over 2,500 U.S. hospitals and more than 9,000 other healthcare providers. The deal raised the healthcare payment records held by Experian from about 1 billion to 4 billion, expanding its data collection beyond credit reporting into healthcare payments.
Court Ventures breach exposed 200 million consumer records
Court records reported by Krebs on Security showed that Hieu Minh Ngo's identity theft service, which obtained access through the Experian-acquired Court Ventures, could query a database of more than 200 million Americans' records. Ngo's service had over 1,300 customers who paid at least $1.9 million to look up SSNs, dates of birth and addresses. Experian acknowledged to a Senate hearing that it had not detected Ngo's activity and learned of it from the U.S. Secret Service. Ngo was sentenced to 13 years in federal prison in 2015. In a 2022 multistate settlement, state attorneys general said Experian Data Corp failed to notify affected consumers after the Secret Service alerted it to the identity thief in 2012.
Mississippi attorney general sues Experian over credit file errors
Mississippi Attorney General Jim Hood sued Experian Information Solutions, alleging it knowingly included error-riddled data in the credit files of millions of Americans and routinely violated consumer protection laws, including wrongly reporting some consumers as being on a federal terrorism watch list. The suit accompanied a multistate investigation of the bureaus led by Ohio.
New York settlement forces bureau dispute and medical-debt reforms
New York Attorney General Eric Schneiderman announced a settlement requiring Experian, Equifax and TransUnion to improve report accuracy, use specially trained employees to review disputes with supporting documents, and wait 180 days before reporting medical debt. No penalty was imposed; the reforms were phased in through 2018.
31 states settle with bureaus for $6 million and accuracy changes
Experian, Equifax and TransUnion agreed to pay $6 million to 31 participating states and change business practices to improve credit report accuracy and dispute handling, resolving the multistate investigation led by Ohio.
T-Mobile data breach exposes 15 million customer records
Experian disclosed that hackers had accessed data on approximately 15 million T-Mobile customers and applicants who underwent Experian credit checks between September 2013 and September 2015. Compromised data included names, addresses, dates of birth, Social Security numbers, and driver's license numbers. T-Mobile CEO John Legere said the company was 'incredibly angry' and would review the relationship with Experian.
CFPB fines Experian $3 million for deceptive score marketing
The CFPB ordered Experian to pay a $3 million civil penalty for deceiving consumers about the credit scores it sold. From at least 2012 through 2014, Experian marketed its proprietary 'educational' PLUS Score as the score lenders use, when lenders did not use it, and in some cases the scores differed significantly from those lenders actually use. The CFPB also found that until March 2014 consumers getting their free annual report through Experian had to view Experian advertisements first, violating the FCRA. A 2012 CFPB study had found that about one in five consumers would likely receive a meaningfully different score than a lender would.
Federal law makes credit freezes free at all bureaus
The Economic Growth, Regulatory Relief, and Consumer Protection Act took effect, requiring all three bureaus to provide free credit freezes and year-long fraud alerts. Previously, consumers in many states paid fees to freeze and unfreeze their reports. Experian continued to promote its paid CreditLock product, available only with a premium monthly subscription, as an 'instant' alternative to the free freeze.
Experian abandons £275m ClearScore takeover after CMA objections
Experian dropped its planned £275 million acquisition of ClearScore, its main UK rival in free credit checking, after the Competition and Markets Authority provisionally found the deal would substantially reduce competition and innovation in credit comparison services.
Experian launches Boost free credit improvement tool
Experian launched Experian Boost, a free tool letting consumers add utility and telecom payments to their Experian credit file to potentially raise their scores (streaming-service payments were added in 2020). While marketed as pro-consumer, the product requires consumers to connect their bank accounts so Experian can identify the payments, expanding the company's data collection and creating a funnel into Experian's consumer products.
South Africa breach exposes 24 million consumers' data
Experian South Africa disclosed that an individual posing as a legitimate client had fraudulently obtained data on an estimated 24 million South African consumers and nearly 800,000 businesses. Experian said the suspect intended to use the data to create marketing leads for insurance and credit services, that no credit or financial information was taken, and that a court order led to the suspect's hardware being impounded and the data secured and deleted. The data was not contained: in September 2020 South Africa's Information Regulator said data from the leak had been found on the dark web, and MyBroadband, working with security experts, verified that the file was freely downloadable online.
UK regulator orders Experian to overhaul its data-broking for marketing
After a two-year investigation of the credit reference agencies' data-broking businesses, the UK Information Commissioner's Office issued an enforcement notice ordering Experian to make fundamental changes to how it uses personal data for direct marketing. Equifax and TransUnion had made changes and withdrew products; Experian did not and appealed.
Experian acquires Tapad for $280M for cross-device tracking
Experian acquired Tapad, a digital identity resolution company, for approximately $280 million from Norwegian telecom Telenor. Tapad uses cookies, device IDs, IP addresses, and publisher data to predict whether multiple devices are owned by the same person, with 91.2% accuracy. Privacy advocates consider cross-device tracking one of the most invasive forms of ad tech. The acquisition expanded Experian's advertising data capabilities beyond credit reporting into real-time digital surveillance.
Experian API exposed credit scores of tens of millions of Americans
Krebs on Security reported that an Experian API used by a partner lending site let anyone look up the credit score and risk factors of tens of millions of Americans with only a name and mailing address. Experian said it fixed the flaw after a student researcher reported it.
CFPB finds bureaus' complaint relief collapsed from 25% to under 2%
A CFPB analysis found Equifax, Experian and TransUnion together reported relief on fewer than 2% of covered complaints in 2021, down from nearly 25% in 2019, relying on template responses; Experian and TransUnion had stopped giving substantive responses in 2020 to complaints they suspected involved third parties.
Bureaus drop paid and small medical collections from reports
Less than three weeks after a CFPB report criticizing medical debt reporting, Experian, Equifax and TransUnion jointly announced they would remove paid medical collections from July 2022, wait a year before reporting unpaid medical collections, and stop reporting medical collections under $500 in 2023, removing nearly 70% of medical collection tradelines.
Krebs exposes Experian account hijacking vulnerability
Security journalist Brian Krebs reported that Experian's website allowed identity thieves to hijack a consumer's existing Experian account simply by signing up again with the victim's personal information and a different email address. Fraudsters could then access credit reports, change PINs and security questions, and unfreeze credit. A class action lawsuit over the practice was filed on July 28, 2022. Krebs had previously reported, in April 2021, that thieves were exploiting Experian's PIN retrieval page to unfreeze credit files.
40 states settle with Experian for $16M over data breaches
A coalition of 40 state attorneys general announced settlements totaling more than $16 million with Experian and T-Mobile over the 2012 Court Ventures/Experian Data Corp and 2015 T-Mobile data breaches. Experian paid $12.67 million over the 2015 breach and agreed to strengthen due diligence, vet acquisitions for security, minimize use of Social Security numbers and offer five years of free credit monitoring, plus $1 million over the 2012 breach; T-Mobile paid $2.43 million.
Identity thieves bypass Experian security for 47 days
Krebs on Security reported that until the end of 2022 identity thieves could bypass Experian's knowledge-based authentication and view anyone's full credit report by editing the URL during the identity-verification step reached via AnnualCreditReport.com, using only name, address, birthday and Social Security number. Security researcher Jenya Kushnir found the method being shared on Telegram channels dedicated to identity theft. Experian later acknowledged in a letter to Krebs that the weakness persisted for nearly seven weeks, from Nov. 9 to Dec. 26, 2022, after staying silent about the incident for a month; Sen. Ron Wyden called it yet another Experian cybersecurity lapse.
UK tribunal largely overturns ICO's Experian enforcement notice
The First-tier Tribunal largely found in Experian's favour on its appeal against the ICO's 2020 enforcement notice, accepting legitimate interests as a basis for large-scale direct-marketing processing and indirect privacy notices via third parties. The Upper Tribunal dismissed the ICO's appeal in April 2024.
FTC fines Experian $650K for CAN-SPAM violations
The FTC charged Experian Consumer Services with violating the CAN-SPAM Act by sending marketing emails to consumers who signed up for accounts to manage their credit information, with no way to unsubscribe. Consumers had to create Experian accounts to freeze or manage their credit online, then received promotional emails for products such as Experian Boost without any opt-out mechanism. Experian paid a $650,000 civil penalty.
CFPB Director calls out rising credit report and score costs
CFPB Director Rohit Chopra told the Mortgage Bankers Association that lenders reported costs for credit reports and scores increasing, sometimes by 400% since 2022, and that a handful of firms had cornered the market. He noted mortgage lenders are captive customers who must often buy tri-merge reports from all three bureaus and pay for essentially the same information six or twelve times, and that the industry profits from 'rapid rescore' fees of $25-40 per file per bureau when consumers need errors fixed quickly.
Experian completes A$820M acquisition of illion
Experian completed the acquisition of illion, a consumer and commercial credit bureau in Australia and New Zealand, for A$820 million (US$585 million, per Experian's FY2025 annual report), with the combined business to be rebranded Experian, likely within 12 months. The deal absorbed an independent bureau competitor in the region and continued Experian's pattern of acquiring regional credit bureaus.
Experian acquires Audigent ad tech platform
Experian acquired Audigent, a data management and curation platform used for cookieless audience targeting and programmatic advertising; terms were not disclosed at announcement, though sources told Digiday the valuation was $200-250 million, and Experian's FY2025 annual report later put the consideration at US$363 million. Building on the 2020 Tapad purchase, the acquisition deepened Experian's role as an advertising identity and audience-data provider alongside its credit bureau business.
CFPB sues Experian for sham dispute investigations
The Consumer Financial Protection Bureau sued Experian for conducting 'sham investigations' of consumer credit report disputes. The complaint alleged Experian used faulty intake procedures, failed to convey all relevant dispute information to furnishers, uncritically accepted furnishers' responses even when improbable, sent consumers confusing notices of results, and improperly reinserted previously deleted inaccurate tradelines. Experian called the lawsuit 'completely without merit.'
Vought halts CFPB supervision and enforcement work
Acting CFPB director Russell Vought closed the agency's headquarters and ordered staff to stop work, suspending supervision, examinations, rulemaking and litigation activity. The pullback removed the main federal check on credit bureau dispute handling weeks after the CFPB had sued Experian.
Experian completes $350M ClearSale acquisition in Brazil
Experian completed its acquisition of ClearSale, Brazil's leading digital fraud-prevention provider, in a deal valued at about $350 million, extending its fraud and identity business in the market where it already owns the dominant bureau, Serasa.
Class action filed over illegal trigger lead phone number sales
A proposed class action (Davis v. Experian) was filed in federal court in California alleging Experian unlawfully sells or discloses credit applicants' phone numbers as 'trigger leads' to third-party lenders without consent. When a lender pulls a consumer's report for a mortgage or home equity application, Experian's Prospect Triggers and related lead services allegedly pass the consumer's phone number and credit data to competing lenders, producing a flood of unsolicited calls and texts that, the complaint alleges, continue for weeks or months on end.
Homebuyers Privacy Protection Act curbs mortgage trigger leads
The Homebuyers Privacy Protection Act amended the FCRA to bar credit bureaus from selling mortgage 'trigger leads' except to consenting lenders or the consumer's existing mortgage originator, servicer, bank or credit union. The restriction took effect March 5, 2026, curbing a practice at the center of a 2025 class action against Experian.
FICO launches direct licensing that bypasses the bureaus
FICO launched a Mortgage Direct License Program letting tri-merge resellers calculate and distribute FICO Scores directly, eliminating reliance on the three bureaus for score delivery. The bureaus' trade group, CDIA, called it a price increase disguised as cost-cutting.
Experian makes VantageScore 4.0 free for mortgage lenders
A week after Equifax's pricing incentives, Experian said it would offer bureau-owned VantageScore 4.0 free to its mortgage clients indefinitely, and at least 50% below FICO if it ever charged. In March 2026 it set a $0.99 standalone price while keeping the score free to lenders that also buy a FICO score in 2026.
Dutch regulator fines Experian €2.7M for unlawful credit data use
The Dutch Data Protection Authority fined Experian Nederland €2.7 million for processing personal data on people's payment behavior, debts and bankruptcies for credit assessments without a valid legal basis and without adequately informing them. Experian accepted the fine, had stopped its Dutch credit-assessment business on January 1, 2025, and said it would delete the database.
Experian launches Credit + Cashflow Score proprietary model
Experian announced the Credit + Cashflow Score, combining traditional credit data, alternative data from its own Clarity Services bureau, 24 months of trended data and consumer-permissioned banking data into a single proprietary score on a 300-850 scale. Experian claims about 40% improved predictive accuracy over conventional models. The product adds yet another proprietary scoring model to a landscape where consumers cannot know which score a lender will use.
Mortgage credit report costs set to rise up to 50% in 2026
Resellers told HousingWire that tri-merge credit report prices for mortgage lenders would rise by up to 50% in 2026, the fourth straight year of increases, driven by FICO's royalty increases plus bureau-level price adjustments by Experian, Equifax and TransUnion.
Experian announces $1 billion share buyback program
Experian announced a new $1 billion share repurchase programme, saying its capital allocation framework and dividend policy were unchanged. The buyback reflects the company's ability to return substantial cash to shareholders from its oligopoly position while consumers remain involuntary participants with no ability to opt out of data collection.
Experian agrees to buy mortgage marketplace Own Up
Experian agreed to acquire Own Up, an AI-powered mortgage shopping platform with a network of over 40 lenders, to add home loans to the Experian Marketplace, where it earns revenue by matching its consumer members with credit card, loan and insurance offers.
CFPB tells consumers to dispute with bureaus first, may drop complaints
The CFPB added prominent language telling consumers to first dispute credit report errors with the bureau and wait 45 days before complaining, and said it would stop processing complaints if a bureau reports that the consumer had not disputed directly — changes sought by the bureaus and their trade groups amid a flood of complaints.
Experian acquires AtData, adding 10 billion email addresses
Experian acquired AtData, an email-intelligence company with real-time insights on more than 10 billion email addresses worldwide, adding them to its identity, fraud and marketing data assets.
Resellers report another Experian price increase for mortgage lenders
Mortgage credit report resellers said Experian imposed a second 2026 price increase of about 3% (roughly $3 per borrower on a ~$90 tri-merge report) after January hikes of up to 50%; one reseller said it had never seen a price increase follow a January increase.
Investigation finds Experian's complaint relief rate collapsed to under 1%
A ProPublica investigation (covered the next day by CNN) found that the share of CFPB consumer complaints Experian resolved in the consumer's favor fell from nearly 20% in 2024 to less than 1% in 2025. The collapse coincided with acting CFPB director Russell Vought halting nearly all agency work in February 2025; more than 2.7 million credit-reporting complaints went without relief after January 2025. Equifax did not show a comparable decline. NCLC's Chi Chi Wu noted the only force compelling bureau effort was 'a lawsuit or a regulator, and now we don't have the regulator.' Documented harm included a Colorado accountant whose score dropped ~85 points over a $240,000 debt belonging to her ex-husband, jeopardizing her home purchase.
FHA and GSEs implement VantageScore 4.0 and FICO 10T for mortgages
HUD and FHFA announced that the Federal Housing Administration will permit VantageScore 4.0 and FICO Score 10T for FHA-insured mortgages, and that Fannie Mae and Freddie Mac were updating their selling guides and immediately accepting VantageScore-scored loans: the first new credit score models for mortgages in decades. The move introduces competition into FICO's mortgage-scoring monopoly, but VantageScore is co-owned by Experian and the other two bureaus. TransUnion, another co-owner, had said in March 2026 that its 99-cent VantageScore 4.0 mortgage pricing could produce more than $900 million in potential savings for lenders and consumers. Experian had already made VantageScore 4.0 free to its mortgage clients indefinitely in October 2025 to drive adoption.
Senators open investigation into Experian over unfixed credit errors
Four Democratic senators led by Elizabeth Warren, with Tammy Duckworth, Andy Kim, and Lisa Blunt Rochester, sent letters to Experian and TransUnion demanding data on dispute and complaint handling, staffing levels, and correspondence with the CFPB regarding 'dropped and halted enforcement actions.' The senators called ProPublica's findings 'greatly concerning' and said they 'raise significant questions about the legality' of the companies' practices, warning that the drop in responsiveness means consumers may be denied mortgages or housing over uncorrected errors.
Record FY26 results and a further $1 billion buyback
Experian reported a record FY26 with 13% total and 8% organic revenue growth, a 28.6% Benchmark EBIT margin and 15% Benchmark EPS growth, and announced a further $1 billion share repurchase programme running to June 30, 2027, after its January 2026 $1 billion buyback.
CFPB overhauls complaint system to restrict credit reporting complaints
The CFPB announced major changes to its complaint system aimed mainly at credit reporting complaints, which it said rose from about 150,000 in 2019 to more than five million in 2025, citing abuse by credit repair firms and bots. The changes further narrow a channel through which consumers had obtained relief from the bureaus.
Evidence (59 citations)
D1: User Value Erosion
D2: Business Customer Exploitation
D3: Shareholder Extraction
D4: Lock-in & Switching Costs
D5: Twiddling & Algorithmic Opacity
D6: Dark Patterns
D7: Advertising & Monetization Pressure
D8: Competitive Conduct
D9: Labor & Governance
D10: Regulatory & Legal Posture
Scoring Log (10 entries)
[Second regrade this cycle] 74→75 after restore-check. D9 5→6 (correction, restored facts): the 40-state AG finding (Delaware AG 2022-11-07) that Experian Data Corp failed to notify Court Ventures victims after the 2012 Secret Service alert, the Experian-acknowledged 47-day (Nov 9-Dec 26 2022) authentication bypass disclosed a month after the fix, and South Africa breach data found freely downloadable after Experian said it was secured add non-transparent breach response to repeated lapses, moving security governance to the top of the category guide's middle band; labor side still benign. Eras: 2022 'CFPB Scrutiny Peak' D9 5→6 (72→73; AG finding and 47-day flaw fall in it), summary revised; 2019 era D9 kept 5 (South Africa containment failure alone aggravates an incident already scored); 1968-2013 eras unchanged. Did not move: D3 kept 6 in all eras (47-day window and SA leak add duration/severity to lapses already scored; no restored fact ties them to underinvestment or buybacks); D10 kept 8 (7 in 2013 and 2022 eras) because the 2022 $1M settlement was already scored and its notification-failure ground adds no new enforcement or consent-order violation; D7/D8 kept 8 because Audigent (US$363m) was already counted and the price does not change monetization intensity or market power. No era boundaries changed; all 7 kept. Added D9 evidence (Delaware AG 2022) and rewrote the D9 narrative.
Checked 2 alternatives, both alive and correctly slugged. Credit Karma: added the 2023 FTC 'pre-approved' order as a caveat. AnnualCreditReport.com: removed 'no upsell' (run by the three bureaus, hands off to Experian's site), added free-freeze vs CreditLock pairing.
Checked 19 removed/trimmed claims: 5 restored, 9 partly restored, 5 confirmed removed, 0 already present. Restored: 47-day Nov 9-Dec 26 2022 bypass window (Krebs 2023-01-25); Court Ventures consumers never notified (Delaware AG 2022-11-07); Hitwise 'limited synergies' (Experian 2015 release); Audigent $200-250M reported valuation (Digiday) and US$363m actual (Annual Report 2025); 24-month trended data (Experian 2025-11-11). Partly: pre-FCRA neighbor gossip/no notice (Minnesota Law Review 1972, EPIC); freecreditreport.com fee in fine print (Forbes 2005); CFPB 2012 one-in-five score gap; SA breach data found online (MyBroadband 2020-09-27); illion US$585m (not US$532m); trigger-lead calls for weeks or months (Top Class Actions); TransUnion $900M+ savings estimate (HousingWire); 2002 marketing claim narrowed to Senate Commerce 2013 report; FICO 28 versions via myFICO monitoring (CNBC Select). Evidence added: Senate Commerce 2013 (PARTLY), Delaware AG 2022 (RESTORED), Krebs 47 days (RESTORED), MyBroadband 2020 (PARTLY), CFPB 2012 (PARTLY), CNBC Select 28 versions (PARTLY), Experian Annual Report 2025 (RESTORED). Confirmed removed: 1988 FCRA amendment (false), punch cards/magnetic tape (only vendor/content-farm blogs), ACR 'created because bureau sites confusing' and '112 routing to for-fee services', PLUS Score in 2010 'four models' framing, Glassdoor 4.1 work-life rating.
Checked 95 items + prose. 29 verified, 30 corrected (2 date-only), 35 re-sourced, 1 removed (false 1988 FCRA-amendment event). Invented details: Jacques $290,000 Wyoming jury award (TRW mixed files), Nov 9-Dec 26 2022 '47 days' window for the Experian authentication bypass, $200-250M Audigent price, '20% of consumers in the 680-740 range' in the CFPB 2017 order. Also fixed misquoted 'credit bureau cartel', FICO's '90% of top lenders' misattributed to the Big Three, 28 vs 16 FICO versions, ClearScore (GBP275m, abandoned not blocked), Passport Health not largest-ever deal, Glassdoor stats, 2008 offshoring misdated to 2023-24, and many root-URL evidence sources.
80→74. D1 9→8 (correction: fact audit removed the unsupported present-tense 'free report buried' claim and the misdated 247%/3.9M complaint figures; the relief collapse and pending CFPB suit fit the 8 row, and 2022-23 medical-debt fixes keep it off 9). D8 9→8 (correction: the 'credit bureau cartel' quote and '90% of all lenders' figure were wrong; the oligopoly and acquisitions fit 8, with no antitrust ruling). D10 9→8 (correction: the 'funding lapse' never happened and the Warren letters were not an investigation; consent-order violation, three motions to dismiss and CDIA rule opposition fit 8). D3 7→6 (recalibration: record FY26 and $1bn buybacks, but proportionate to cash flow and without mass layoffs; repeated security lapses keep it at the top of the moderate band). D4 10→9 (recalibration: involuntary and permanent, but freezes, weekly free reports, prescreen opt-out and 2026 trigger-lead limits mean it is not the 'total lock-in' 10 row). D5 8→7 (recalibration: many opaque scores, but the educational-score deception ended in 2014 and there is no evidence of metric manipulation). D2, D6, D7, D9 unchanged. Eras: kept 1968 TRW, 1996 Brand Creation and 2013 Data Breach Reckoning; re-dated 'IPO & Global Expansion' 2006-10-01→2006-10-10 and relabeled it 'Demerger & Global Expansion'; re-dated 'Monetization Acceleration' 2019-01-01→2019-03-18 (Boost launch); split it at 2022-01-05 (CFPB complaint-relief report) into 'CFPB Scrutiny Peak'; re-dated the current era from the 2026-06-29 rescore date to 2025-02-08 (Vought's CFPB stop-work order) and relabeled it from 'Cartel Confrontation' to 'Regulator Retreat'. Added 12 historical events (Metromail, 2010 FTC rule, 2012 CFPB supervision, Mississippi 2014, NY and 31-state 2015 settlements, ClearScore 2019, ICO 2020, API leak 2021, CFPB 2022 report, medical debt 2022, ICO tribunal 2023) and 13 new ones (Vought halt, ClearSale, HPPA, FICO direct license, free VantageScore, Dutch €2.7M fine, 2026 price rises, Own Up, CFPB complaint restrictions, AtData, FY26/buyback, CFPB complaint overhaul).
Periodic rescore: ProPublica/CNN (Mar 2026) found Experian's CFPB complaint relief rate collapsed from ~20% (2024) to <1% (2025) as the gutted CFPB stopped enforcing, plus a May 2026 Warren-led Senate investigation. D1 8→9 (dispute function near-collapse), D10 8→9 (operating in/benefiting from defunded enforcement). 78→80.
Fixed CFPB $3M fine date: was cited as October 2023 but actually March 2017 (page modification date confused with enforcement date). Corrected in D6/D10 summaries and 3 evidence item dates. Fixed history entry to use standard schema format.