Credit Sesame recently notified customers of a data breach involving unauthorized access to user accounts. According to a notice published on the Vermont Attorney General's website, the incident involved suspicious online activity in which an unauthorized actor gained access to certain user accounts for a limited period.
Upon discovering the suspicious activity, Credit Sesame secured the affected accounts and launched an investigation to determine the nature and scope of the breach. The investigation revealed that unauthorized log-ins occurred, potentially allowing the unauthorized actor to view certain user account information.
The breach involved personally identifiable information (PII), including names and possibly other sensitive account details; however, the exact types of information exposed have not yet been publicly disclosed.
Credit Sesame is offering affected individuals complimentary credit monitoring and identity theft protection services through Experian IdentityWorks.
Affected customers are encouraged to enroll in these services, which include:
Affected customers should follow the instructions provided in the notification letter sent by Credit Sesame to enroll and must be done by July 31, 2025.
Additionally, Credit Sesame recommends customers take proactive steps to protect their information, such as creating strong, unique passwords, using a password manager, and enabling multi-factor authentication (MFA) on their accounts.
For more detailed information, customers can contact Credit Sesame's dedicated assistance line provided in their notification letter or write directly to the company at their headquarters: 444 Castro Street, Suite 500, Mountain View, CA 94041.
Customers are also advised to regularly review their account statements and monitor their credit reports for any suspicious activity. Free annual credit reports can be obtained through AnnualCreditReport.com.
The company's website can be accessed at creditsesame.com.