Experian
One of the three major U.S. consumer credit bureaus, Experian collects credit data on approximately 250 million Americans and sells reports to lenders, employers, landlords, and insurers. Consumers are involuntary participants with no ability to opt out. Experian also operates one of the most aggressive consumer-facing subscription businesses among the Big Three and has expanded heavily into marketing data, audience targeting, and identity services. The CFPB sued Experian in January 2025 for 'sham investigations' of credit report errors.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
TRW acquired Credit Data Corporation and began automated credit reporting in an essentially unregulated environment. Credit bureaus collected data without consumer consent or knowledge, filed reports without accuracy requirements, and shared information with minimal restrictions on permissible purpose. The industry operated as an informal oligopoly with no consumer rights, but its reach and monetization were far smaller than today.
GUS created the Experian brand by combining TRW's credit unit with UK-based CCN, forming a transatlantic credit bureau. The FCRA had established basic consumer rights since 1970, but enforcement was weak and the bureaus routinely generated errors that devastated consumers. The e-OSCAR automated dispute system, created in 1993, systematized the minimization of consumer complaints. Consumer data use was expanding into employment screening and insurance underwriting.
Experian demerged from GUS and listed on the London Stock Exchange, gaining independent access to capital markets and intensifying shareholder pressure for growth. The FTC had already twice settled with Experian over deceptive freecreditreport.com marketing ($79.95 subscription hidden in fine print). Congress passed FACTA in 2003 mandating free annual reports, and the bureaus co-created VantageScore in 2006, adding scoring opacity. Experian began aggressive global expansion, acquiring Serasa in Brazil for $1.2 billion.
Experian's security failures became public as the Court Ventures acquisition exposed 200 million consumer records to an identity theft operation, and the T-Mobile breach (disclosed 2015) compromised 15 million more. The company's largest-ever acquisition, Passport Health ($850M), expanded its data reach into healthcare. The FTC found 1 in 5 consumers had verified credit report errors. Experian was fined $3M by the CFPB in 2017 for deceptive score marketing. The bureau's consumer subscription business was growing rapidly.
After the 2018 law made credit freezes free, Experian pivoted to selling a paid CreditLock alternative at $24.99/month while launching Experian Boost to collect consumer banking data. The Tapad acquisition ($280M) brought cross-device tracking capabilities, transforming Experian into an advertising data company alongside its credit bureau function. The South Africa breach (24 million consumers) demonstrated continuing security failures. Marketing data licensing expanded to over 5,000 consumer attributes across 15 industry verticals.
The CFPB sued Experian in January 2025 for 'sham investigations' of credit report disputes, the most significant enforcement action against the company. Credit report prices quadrupled since 2022 with the CFPB Director calling the industry a 'credit bureau cartel.' Experian acquired illion (A$820M) and Audigent, expanding its global oligopoly and ad tech capabilities. A $1 billion share buyback was announced while credit reporting complaints surged 247%. The company launched its Credit + Cashflow Score, adding another proprietary model to an opaque landscape.
Alternatives
The federally mandated free service to pull your full credit report from all three bureaus (Experian, Equifax, TransUnion) — now available weekly. No subscription, no upsell, no credit score. The catch: it's a report snapshot, not ongoing monitoring. Use this to check your Experian file for errors without handing Experian any money.
Free credit monitoring using TransUnion and Equifax data, with score updates, dispute tools, and fraud alerts. Easy switch — just sign up. Caveat: Credit Karma is ad-supported and recommends financial products; it doesn't use Experian data, so your Experian report still requires a separate free pull from AnnualCreditReport.com.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (41 events)
TRW acquires Credit Data Corporation
TRW Inc. acquired Credit Data Corporation, creating TRW Information Services. This marked the beginning of the automated credit reporting business that would eventually become Experian, as software engineers developed one of the first computerized credit reporting systems using punch cards and magnetic tape.
Fair Credit Reporting Act becomes law
Congress passed the FCRA, the nation's first consumer financial privacy statute, in response to rampant abuses in the credit reporting industry including fabricated negative information, collection of 'lifestyle' data from neighbors, and no consumer access to their own files. The law established basic rights to dispute errors and limited permissible uses of credit data, but enforcement was weak and penalties minimal.
Credit bureau data expands into employment and insurance screening
By the late 1980s, credit bureau data had expanded well beyond lending decisions. Employers began routinely pulling credit reports for hiring decisions, and insurance companies used credit information in underwriting. A 1988 amendment to the FCRA clarified 'permissible purpose' to include employment and insurance, formalizing the expansion of involuntary consumer data use into domains consumers rarely expected. TRW's database, containing records on tens of millions of Americans, became essential infrastructure for multiple industries beyond its original credit reporting purpose.
FTC consent decree against TRW for mixed files and inaccuracies
The FTC filed a consent decree against TRW requiring the company to implement procedures to prevent 'mixed files,' where data from different consumers was merged into a single report. Between 1990 and 1993, credit bureau complaints led all categories at the FTC with 30,901 complaints (20.6% of total), and 44% involved mixed files. A 1991 Wyoming jury awarded Paul K. Jacques $290,000 after TRW contaminated his credit report with his father's information, illustrating systemic accuracy failures. TRW was required to implement matching improvements by July 1992.
TRW incorrectly flags 1,400 Vermont consumers
A TRW investigator incorrectly reported that approximately 1,400 people in Vermont had not paid their property taxes, ruining their credit. Several similar cases were discovered throughout New England. The incident illustrated systemic accuracy problems in the pre-digital credit reporting era and the devastating consumer impact of bureau errors with no effective recourse.
e-OSCAR automated dispute system created
Experian, Equifax, and TransUnion jointly created the Online Solution for Complete and Accurate Reporting (e-OSCAR) system to automate consumer dispute processing. The system compressed disputes into codes with minimal free-text fields, limiting investigators to approximately 4 minutes per dispute. Consumer advocates have argued this design systematically strips context and evidence from disputes, undermining the FCRA's dispute investigation requirements.
Consumer Credit Reporting Reform Act strengthens FCRA
Congress passed comprehensive amendments to the FCRA in the Consumer Credit Reporting Reform Act of 1996, tightening accuracy requirements, expanding consumer rights to dispute information, and establishing clearer obligations for data furnishers. However, the amendments also broadly preempted state consumer protection laws, limiting states' ability to enact stronger protections than federal FCRA.
GUS creates Experian brand from TRW and CCN merger
TRW sold its Information Services unit to Bain Capital and Thomas H. Lee Partners, which renamed it Experian and immediately resold it to GUS plc (The Great Universal Stores). GUS merged its UK credit information business CCN into Experian, creating a transatlantic credit bureau. This consolidated credit reporting infrastructure across the US and UK under a single corporate entity.
FTC settles with Big Three for $2.5M over blocking consumer calls
Experian, Equifax, and TransUnion agreed to pay a combined $2.5 million to settle FTC charges that they violated the FCRA by failing to maintain accessible toll-free phone numbers. Since September 1997, over one million calls to Experian's toll-free number received busy signals or messages that all representatives were busy. Experian paid $1 million of the total and agreed to maintain blocked call rates under 10% and average hold times under 3.5 minutes. The case demonstrated how the bureaus systematically obstructed consumer access to dispute their own credit reports.
Experian expands marketing data licensing to businesses
Experian expanded its marketing services division to sell consumer demographic and behavioral data to businesses for direct marketing, audience targeting, and customer profiling. Drawing on its credit database of tens of millions of consumers, the company offered mailing lists, segmentation tools, and marketing analytics to thousands of business clients. A 1993 amendment to TRW's FTC consent decree had allowed use of 'identifying information' from its credit database for list marketing, and Experian built this into a significant revenue stream that monetized consumer data well beyond its original credit reporting purpose.
Congress passes FACTA, creating AnnualCreditReport.com
The Fair and Accurate Credit Transactions Act (FACTA) mandated that consumers receive one free credit report per year from each bureau. Congress created the centralized AnnualCreditReport.com website specifically because the bureaus' own sites made free report access deliberately confusing, often steering consumers toward paid products instead. Within months, 233 impostor domains with similar names appeared, with 112 routing users to for-fee services.
FTC settles charges over deceptive freecreditreport.com
ConsumerInfo.com (an Experian subsidiary) settled FTC charges for deceptively marketing 'free credit reports' at freecreditreport.com without adequately disclosing automatic enrollment in a $79.95/year credit monitoring subscription. The notice of the fee was in small print buried in the privacy policy on the second page of the order form. Experian paid $950,000 in disgorgement and agreed to stop deceptive 'free' marketing.
Bureaus co-create VantageScore model
Experian, Equifax, and TransUnion jointly created VantageScore Solutions LLC, launching a competing credit scoring model. VantageScore added yet another layer of scoring opacity alongside FICO's proliferating versions. Because VantageScore uses the bureaus' own data and the bureaus own the company, it effectively allowed them to capture scoring revenue previously flowing to FICO while adding consumer confusion about which score matters.
Experian demerges from GUS, lists on London Stock Exchange
Experian became an independent publicly traded company on the London Stock Exchange with an initial share price of 5.60 GBP, after demerging from GUS plc. Independence gave Experian direct access to capital markets and created shareholder pressure for revenue growth and margin expansion, intensifying incentives to monetize consumer data through expanded product lines and acquisitions.
Experian settles second FTC action over freecreditreport.com
ConsumerInfo.com (Experian subsidiary) paid an additional $300,000 to settle new FTC charges that it continued running deceptive 'free credit report' ads that failed to adequately disclose the automatic $79.95 credit monitoring enrollment. This was a violation of the 2005 consent order, demonstrating that Experian continued the deceptive marketing practice despite the prior settlement.
Experian acquires Hitwise for $240M for web behavioral tracking
Experian acquired Hitwise, an internet marketing intelligence company, for $240 million. Hitwise collected and aggregated browsing data from ISPs on how over 25 million consumers used the internet across the US, UK, and Australia, reporting on nearly a million websites daily. The acquisition expanded Experian's data capabilities from offline credit data into online behavioral tracking, offering businesses insight into how consumers behaved on the web. Experian later sold Hitwise in 2015 for a fraction of the acquisition price after concluding it had 'limited synergies' with core businesses.
Experian acquires Serasa for $1.2 billion
Experian acquired a 65% stake in Serasa, Brazil's market-leading credit bureau with approximately 60% market share, for $1.2 billion. The stake later grew to 100%. Following the acquisition, Experian controlled three of the top five credit bureaus worldwide (US, UK, and Brazil), cementing its global oligopoly position in credit reporting.
State credit freeze fees generate revenue from consumer security needs
Before federal legislation mandated free freezes in 2018, consumers who wanted to restrict access to their credit files had to pay $5-10 per bureau per freeze and per thaw action. A California consumer paid $10 to each of three bureaus ($30 total) to freeze, and another $30 to thaw. Most states set fees between $5 and $20 per action. This created a perverse revenue stream where bureaus profited from consumers' desire to protect themselves against the bureaus' own data vulnerabilities, while making security protection financially burdensome for lower-income consumers most vulnerable to identity theft.
$45 million class action settlement over bankruptcy reporting
Experian, TransUnion, and Equifax settled the White v. Experian class action for approximately $45 million. The lawsuit alleged the bureaus continued reporting debts as having active balances even after consumers had filed Chapter 7 bankruptcy and those debts had been discharged, directly harming consumers who had legally resolved their obligations.
VantageScore 2.0 deepens scoring model fragmentation
The bureau-owned VantageScore Solutions released VantageScore 2.0, maintaining the non-standard 501-990 scale that further confused consumers accustomed to FICO's 300-850 range. By this point, consumers accessing their credit could encounter at least four fundamentally different scoring models (FICO, VantageScore, Experian's PLUS Score, and various industry-specific FICO variants), each producing different numbers from the same underlying data. Lenders used yet different internal scoring models, making it virtually impossible for consumers to predict how their creditworthiness would be assessed.
Experian acquires Court Ventures, inheriting identity theft access
Experian acquired Court Ventures, a public records database company, for its court records data. Unknown to Experian at the time, a Vietnamese identity thief named Hieu Minh Ngo had been posing as a private investigator to access the system since 2007. After the acquisition, Ngo continued accessing Experian's consumer data for nearly ten months, with his customers making approximately 3.1 million queries on Americans' Social Security numbers, dates of birth, and addresses.
FTC study finds 1 in 5 consumers have credit report errors
The Federal Trade Commission published a landmark study finding that 1 in 5 consumers had a verified error on at least one of their credit reports, with 5% having errors severe enough to affect the interest rates they would receive. The study demonstrated systemic accuracy failures across the bureau industry, not just occasional mistakes, and became a foundational reference for consumer advocacy against bureau practices.
Experian acquires Passport Health Communications for $850M
Experian completed its largest-ever acquisition, purchasing Passport Health Communications for $850 million. Passport Health served over 2,500 hospitals and 9,000 healthcare providers, with access to 4 billion healthcare payment records spanning ten years. The acquisition expanded Experian's data collection far beyond credit reporting into healthcare claims data, raising questions about the scope of consumer data monetization.
Court Ventures breach exposed 200 million consumer records
Krebs on Security revealed that Hieu Minh Ngo's identity theft operation, which exploited the Experian-acquired Court Ventures system, had accessed approximately 200 million consumer records. Ngo's service had attracted over 1,300 customers who paid $1.9 million to look up SSNs, dates of birth, and addresses. Experian never notified affected consumers of the breach. Ngo was sentenced to 13 years in federal prison.
T-Mobile data breach exposes 15 million customer records
Experian disclosed that hackers had accessed data on approximately 15 million T-Mobile customers and applicants who underwent Experian credit checks between September 2013 and September 2015. Compromised data included names, addresses, dates of birth, Social Security numbers, and driver's license numbers. T-Mobile CEO John Legere said the company was 'incredibly angry' and would review the relationship with Experian.
CFPB fines Experian $3 million for deceptive score marketing
The CFPB ordered Experian to pay $3 million for deceiving consumers about the credit scores it sold. From 2012-2014, Experian marketed its proprietary PLUS Score as being used by lenders, when lenders actually used different scores. About 20% of consumers in the 680-740 FICO range received educational scores that placed them in different credit categories. The CFPB also found Experian forced consumers to view ads before accessing free reports, violating the FCRA.
Federal law makes credit freezes free at all bureaus
The Economic Growth, Regulatory Relief, and Consumer Protection Act took effect, requiring all three bureaus to provide free credit freezes. Previously, consumers were charged $5-10 per bureau to freeze and unfreeze their reports, generating revenue from a security measure that protected against the bureaus' own data vulnerability. Experian responded by promoting its paid CreditLock product ($24.99/month) as an alternative with 'instant' functionality.
Experian launches Boost free credit improvement tool
Experian launched Experian Boost, allowing consumers to add utility, telecom, and streaming service payments to their Experian credit file to potentially raise their scores. While marketed as pro-consumer, the product requires consumers to grant Experian read-only access to their bank accounts, expanding the company's data collection. The tool serves as a powerful acquisition funnel for paid Experian subscriptions, with millions of sign-ups providing new consumer banking data.
South Africa breach exposes 24 million consumers' data
Experian disclosed that data on 24 million South African consumers and 793,000 businesses was handed to a fraudulent client who posed as a legitimate business customer in May 2020. The breach was South Africa's largest-ever data leak. Experian claimed the individual intended to use the data to create marketing leads for insurance and credit services. The company said it recovered and deleted the data, but couldn't confirm it hadn't been copied.
Experian acquires Tapad for $280M for cross-device tracking
Experian acquired Tapad, a digital identity resolution company, for approximately $280 million from Norwegian telecom Telenor. Tapad uses cookies, device IDs, IP addresses, and publisher data to predict whether multiple devices are owned by the same person, with 91.2% accuracy. Privacy advocates consider cross-device tracking one of the most invasive forms of ad tech. The acquisition expanded Experian's advertising data capabilities beyond credit reporting into real-time digital surveillance.
Krebs exposes Experian account hijacking vulnerability
Security journalist Brian Krebs reported that Experian's website allowed anyone to hijack a consumer's Experian account using only their personal information and a different email address, with no further verification. Fraudsters could then access credit reports, change PINs, and unfreeze credit. A class action lawsuit was filed in August 2022. Krebs had previously reported a similar PIN vulnerability in April 2021 that allowed identity thieves to unfreeze credit files.
40 states settle with Experian for $16M over data breaches
Forty state attorneys general reached a combined $16 million settlement with Experian and T-Mobile over the 2012 Court Ventures and 2015 T-Mobile data breaches. Under the settlement, Experian agreed to strengthen due diligence and data security practices. Experian paid $12.67 million of the total, while T-Mobile paid the remainder. The settlement covered breaches that collectively exposed data on over 200 million consumers.
Identity thieves bypass Experian security for 47 days
Krebs on Security reported that identity thieves exploited a vulnerability in Experian's website between November 9 and December 26, 2022, allowing anyone to bypass knowledge-based authentication and view consumer credit reports using only name, address, birthday, and Social Security number. Security researcher Jenya Kushnir discovered the method being shared on Telegram channels dedicated to identity theft.
FTC fines Experian $650K for CAN-SPAM violations
The FTC charged Experian Consumer Services with violating the CAN-SPAM Act by sending millions of marketing emails to consumers who signed up for accounts to manage their credit information, with no way to unsubscribe. Consumers were required to create free Experian accounts to freeze or manage their credit, then were bombarded with promotional emails for paid products without any opt-out mechanism. Experian paid a $650,000 civil penalty.
CFPB Director calls out credit bureau report price gouging
CFPB Director Rohit Chopra told the Mortgage Bankers Association that credit report and FICO score prices had increased by as much as 400% since 2022, characterizing the industry as a 'credit bureau cartel.' He noted that mortgage lenders are captive customers who must purchase tri-merge reports, often paying for the same information multiple times. The industry also profits from 'rapid rescore' fees of $25-40 per file when consumers need corrections processed quickly for mortgage applications.
Experian completes A$820M acquisition of illion
Experian completed the acquisition of illion, a leading consumer and commercial credit bureau in Australia and New Zealand, for A$820 million (approximately US$532 million). The acquisition eliminated an independent competitor in the Australian market, with illion to be rebranded to Experian within 12 months. The deal continued Experian's pattern of acquiring regional credit bureaus to extend its global oligopoly position.
Experian acquires Audigent ad tech platform
Experian acquired Audigent, a leading data activation and identity platform in the advertising industry, for an estimated $200-250 million. Audigent's technology enables cookie-less audience targeting and programmatic advertising through curated private marketplaces. The acquisition, building on the 2020 Tapad purchase, positions Experian as a major independent provider of advertising identity resolution, deepening the company's transformation from credit bureau to comprehensive data broker.
CFPB sues Experian for sham dispute investigations
The Consumer Financial Protection Bureau filed suit against Experian for conducting 'sham investigations' of consumer credit report disputes. The complaint alleged Experian failed to convey disputes to furnishers fully and accurately, distorted and truncated disputes using the e-OSCAR system, relied excessively on furnishers rather than conducting independent investigations, and improperly reinserted previously deleted tradelines. Experian dismissed the lawsuit as 'without merit.'
Class action filed over illegal trigger lead phone number sales
A nationwide class action lawsuit was filed against Experian in California federal court alleging the company illegally sold consumers' phone numbers to third-party lenders through 'trigger leads.' When consumers applied for credit, Experian's Prospect Triggers service sold their phone numbers and credit data to competing lenders within 24 hours, triggering floods of unsolicited calls and texts lasting weeks or months. While the FCRA permits some trigger lead data sharing, the lawsuit alleges phone number disclosure is not authorized.
Experian launches Credit + Cashflow Score proprietary model
Experian announced the Credit + Cashflow Score, combining traditional credit data, alternative data from Clarity Services (the largest alternative credit bureau), consumer-permissioned banking data including income and balances, and 24-month trended data into a single proprietary score. Experian claims 40% improved predictive accuracy over conventional models. The product adds yet another proprietary scoring model to an already opaque landscape where consumers cannot know which score a lender will use.
Experian announces $1 billion share buyback program
Experian unveiled a $1 billion share repurchase program running through June 2027, designed to reduce shares in circulation and cover employee share plan obligations. The buyback reflects the company's ability to extract substantial shareholder returns from its oligopoly position while consumers remain involuntary participants with no ability to opt out of data collection or share in the value their data generates.
Evidence (39 citations)
D1: User Value Erosion
D2: Business Customer Exploitation
D3: Shareholder Extraction
D4: Lock-in & Switching Costs
D5: Twiddling & Algorithmic Opacity
D6: Dark Patterns
D7: Advertising & Monetization Pressure
D8: Competitive Conduct
D9: Labor & Governance
D10: Regulatory & Legal Posture
Scoring Log (4 entries)
Fixed CFPB $3M fine date: was cited as October 2023 but actually March 2017 (page modification date confused with enforcement date). Corrected in D6/D10 summaries and 3 evidence item dates. Fixed history entry to use standard schema format.