Equifax breach exposed personal details for 143 million U.S. consumers. The breach exposed names, addresses, birthdates, Social Security numbers and in some cases, driver’s license numbers. Equifax charges some consumers between $5 and $10 to replace the insecure PIN. The PIN is merely based on the date and time – down to the minute – when someone initiates a freeze, writes Tony Webster, who describes himself as a web engineer and public records researcher, on Twitter. The potential danger posted by the PIN-generating pattern should be obvious: Any fraudster who already has a person’s personal information can potentially brute-force the credit-freeze PIN.”]
Source: https://www.cuinfosecurity.com/blogs/latest-equifax-bungle-predictable-credit-freeze-pins-p-2544