"We have also secured the services of Equifax to provide identity monitoring services at no cost to you for two years. Below please find information on signing

"We have also secured the services of Equifax to provide identity monitoring services at no cost to you for two years. Below please find information on signing up for a complimentary membership to Equifax’s identity monitoring services, including key product features" Really PayPal? You mean this Equifax? https://en.wikipedia.org/wiki/2017_Equifax_data_breach https://en.wikipedia.org/wiki/2017_Equifax_data_breach The security breach problem altogether has been turned in to a source of extra profit for the credit reporting companies whose faulty systems, lack of data verification, and resulting poor data quality are the root cause of these issues in the first place. The problem has never been "oh no someone stole your identity!". Identity can not be stolen, only temporarily misattributed in the eyes of one party or another. The actual problem is that companies like banks and credit card issuers don't actually know who they are dealing with and don't want to put any effort in to verifying that. Using just a few pieces of already available, static information about a customer was never enough to say you actually know who your company is signing a contract with. Calling it "identity theft" when someone feeds your faulty signup process incorrect information is merely a means of passing the problem with your systems off to the customer. Now we're going as far as pretending the root cause of this stupidity can also sell us the cure? Nonsense. If anyone ever "steals my identity", I'm going to sue the credit reporters for libel. They have admitted before that some 70% of their records contain inaccurate information and they know full well that a few bits of static information is not enough the identify an individual among hundreds of millions. They also know they don't do anything to establish that any new reports coming in from partner businesses are actually real and accurate. Yet they still peddle that inaccurate information to third parties. That is the same as if a journalist made up a story saying you did some shit you didn't do. They are knowingly giving out information about a person that is either provably false or which they have no good reason to believe is true in a way that can cause financial harm and loss of reputation. Classic libel. Further, if some business reported that I took a loan from them when I didn't, that isn't my problem, it's theirs. They failed to adequately verify who they were dealing with. Not my problem. Reporting that inaccuracy to a third party who then broadcasts that to a bunch of other companies, is also libel. They can make a case that they didn't know for sure that their claim that I owe them was false at the time, but they actually never had a good reason to believe it was true. Static information alone, especially that which we already know is in circulation among public entities, is not a valid way of identifying who you are dealing with. Pretending that it is anyway is just bad business. People need to hold these businesses accountable for the damage their faulty system designs are causing.