Everything we know about the MoneyGram breach

October 9, 2024

By Kim Komando

Another day, another massive data breach. This time, it’s MoneyGram, a global mega-company that handles money transfers, bill pay and other financial services. They have digital platforms and retail locations, and they even power Walmart’s money-transfer service.

There’s no formal statement yet on exactly how many people were impacted, but we do know MoneyGram has over 150 million customers worldwide.

The whole shebang, exposed

In their official statement, MoneyGram says an unauthorized third party (aka a vendor, hacker or group of hackers) accessed and acquired a ton of personal info between Sept. 20 and Sept. 22. MoneyGram didn’t discover the break-in until about a week later, on Sept. 27.

MoneyGram says the following types of customer data have been compromised:

• Social Security numbers and government ID documents
• Contact information, including email, addresses and phone numbers
• Birthdates
• Bank account numbers
• Utility bills
• MoneyGram Plus Rewards information and transaction information
• Criminal investigation information (like fraud) for “a limited number of consumers”

MoneyGram is working with external cybersecurity experts and law enforcement. It generally takes a few weeks or even months to discover the full extent of breaches like this and all those impacted. In the meantime, they’re providing customers with free identity protection and credit monitoring services for two years.

Whenever a big breach like this happens …

… It’s always a good idea to take a proactive approach with your credit file. If you’ve used MoneyGram before, place a security freeze on your credit report with each of the three major credit reporting agencies. Here’s how:

• Equifax: Visit Equifax.com and follow the steps to freeze online. By phone, call 1‑888‑298‑0045. For snail-mail requests: Print this and mail it to Equifax Information Services LLC, P.O. Box 105788, Atlanta, GA 30348‑5788.
• Experian: To do it online, visit the Experian Freeze Center. By phone, call 1‑888‑EXPERIAN (1‑888‑397‑3742), or submit your request in writing to Experian Security Freeze, P.O. Box 9554, Allen, TX 75013.
• TransUnion: Add a freeze online on the TransUnion website. Call 1‑888‑916‑8800, or mail TransUnion, P.O. Box 160, Woodlyn, PA 19094.

Once you’ve placed the freeze, you’ll get a personal identification number or password to temporarily lift or remove the freeze. Make sure you keep this info in a safe place.

And there’s a fourth credit reporting agency now

When freezing your credit, include Innovis. Innovis also maintains consumer data that some lenders, insurers and other entities use to evaluate your creditworthiness. Visit the Innovis website to place a security freeze, call 1‑800‑540‑2505, or send a letter to Innovis Consumer Assistance, P.O. Box 1640, Pittsburgh, PA 15230.

Now, just use the website links, if you can. If you want to mail in your freeze request, you need to send it via certified mail and include your full name, address (current and previous addresses for the past two years), Social Security number, date of birth, a copy of a government-issued ID (e.g., driver’s license) and proof of address (e.g., utility bill). That’s a lot of your life in one envelope.

Let’s talk about your Social Security number

To safeguard your Social Security number, use the government’s free Self Lock feature. You’ll need an E‑Verify account to do this online. You can also request a block by calling the Social Security Administration at 1‑800‑772‑1213. Expect to wait — trust me.

If your SSN is stolen and used for someone’s gain, like opening up a loan or getting a job, start with the Federal Trade Commission at IdentityTheft.gov. Fill out the form there, and you’ll get an entire plan for how to recover your identity and protect yourself going forward.

The IRS also has a place to report if you suspect someone is using your SSN: Identity Theft Central. Major red flags to watch for? You receive a tax form for a job you didn’t do or you submit your taxes and there’s already something on file.