Most of us have credit reports assembled about us by the credit bureaus, yet few of us know about the surprising history of credit reporting.
The credit bureaus as we know them today grew from small, local organizations that formed as far back as the 1800s. In contrast, modern credit bureaus market themselves as expansive repositories of consumer information that can be used for an ever-growing number of applications.
Unfortunately, the early credit bureaus were known to use unethical tactics to collect information on consumers and sell this information to businesses.
While it may seem that the problems of these early credit bureaus have been addressed by legislation such as the Fair Credit Reporting Act, the credit reporting system still has serious flaws, some of which we highlight in “What Happened to Equal Credit Opportunity for All?”
In this article, we will explore the story of how the credit reporting industry came to be, how the credit bureaus evolved into what they are today, and the many controversies that have taken place along the way.
What Is a Credit Report?
A credit report contains information about a consumer’s credit history. This includes a list of current and past credit accounts, along with the age, credit limit, balance, and payment history of each account. It also contains identifying information such as your name, address, and social security number.
This information helps lenders evaluate the creditworthiness of potential borrowers so they can decide whether to extend credit and what the terms of the loan should be.
For more information on credit reports, see our article “Credit Reports: What You Need to Know.”
What Are Credit Bureaus?
Credit bureaus, also known as credit reporting agencies or CRAs, are the companies that gather credit-related information about consumers and distribute it to lenders—and increasingly, other types of businesses who have an interest in checking people’s credit history.
In the United States today, there are three major credit bureaus: Experian, Equifax, and TransUnion. While there are many other credit bureaus, these three companies dominate the industry.
But it wasn’t always this way. The first credit reporting organizations were a far cry from the modern credit bureaus of today, and the unsavory tactics they used to run their businesses may surprise you.
Early Credit Reporting Agencies
The first recorded group that shared credit information about consumers was the colorfully named “Society of Guardians for the Protection of Trade Against Swindlers and Sharpers,” which was founded in London in 1776. The Society produced reports for its members on the credit history of individual customers, which were often full of gossip in addition to credit information.
Like the Society, the early credit reporting agencies were small, local organizations that were essentially groups of merchants sharing information about consumers. This allowed them to offer credit to more people and avoid lending to high-risk individuals.
These organizations were industry-specific and did not share information with each other. In 1960, it is estimated that about 1,500 independent local credit bureaus were in operation in the United States.
According to the Philadelphia Federal Reserve Board, these bureaus were “working with local lenders with incomplete and often unverifiable information.”
The bureaus didn’t just collect the information you might expect, such as name and loan information. They also gathered sensitive personal information such as marital status, age, gender, race, religion, employment history, and driving records.
The credit bureaus didn’t stop there. They checked the local newspapers for announcements of promotions, marriages, arrests, and deaths, and attached news clippings to consumers’ credit reports. They would even go so far as to ask someone’s neighbors and colleagues for testimonies about that person’s character.
Even the local “Welcome Wagon” was working undercover for the credit bureaus. This organization would surreptitiously gather information on new residents of an area under the guise of welcoming them to the neighborhood.
The credit bureaus were focused solely on serving the local creditors that belonged to their respective organizations. As such, they typically only reported derogatory information.
Furthermore, there was no standardized way to evaluate a person’s creditworthiness. It was all based on the subjective whims and prejudices of the creditor looking at their credit file.
What’s worse is that the credit bureaus did not allow consumers to view the information that was being reported about them. There was no way for consumers to verify whether the information was correct or where it came from.
Modernization of Credit Reporting
According to the Harvard Business School paper, over the course of the 1960s, many of these small, local credit bureaus started to join together, forming networks that spanned the nation.
In 1971, the Fair Credit Reporting Act (FCRA) was passed to ensure the “accuracy, fairness, and privacy of information in the files of consumer reporting agencies.”
By establishing requirements as to the accuracy and of consumer credit files and access to their information, the FCRA was intended to protect consumers from the unfair practices that were rampant in the credit reporting industry.
The Fair Credit Reporting Act
The FCRA enacted the following rights for consumers:
- Consumers must be notified if negative action is taken against them because of the information in their credit file.
- Consumers must be able to find out what is in their credit file.
- Consumers must be able to dispute inaccurate information and have it corrected or deleted.
- Outdated information (generally more than 7-10 years old for negative information) cannot be reported.
- Consumers must provide consent for employers to check their credit reports.
- Consumers must have the option to request to be excluded from lists for unsolicited credit and insurance offers.
- Consumers who appear on a list of prospects requested by a lender must be extended a firm offer of credit.
As a result of the passing of the FCRA, credit bureaus stopped recording events such as marriages and arrests and started focusing more on verifiable credit history information. They also started reporting positive information in addition to negative information.
In 1996, the FCRA was amended to extend additional protections to consumers, including the following:
- Consumers have the right to take legal action against anyone who obtains their credit report without a permissible purpose.
- Credit bureaus can be held liable for knowingly reporting misinformation.
- Credit bureaus must investigate disputes within a certain period of time, usually 30 days.
- Banks can share credit information with affiliates, but consumers must be given the opportunity to prohibit this sharing of their information.
The advent of computer-powered databases allowed some credit reporting agencies to become more efficient and do more business, while smaller agencies that could not afford to make the change got out of the industry.
This consolidation eventually led to the domination of the market by the three major bureaus we know today.
While Experian did not officially come about until 1996, according to creditrepair.com, the story of Experian can be traced back almost 200 years.
The Manchester Guardian Society was formed in England in 1826 to share information on customers who didn’t pay their debts. This organization eventually became a part of Experian, as did a group of merchants that later formed in Dallas for a similar purpose.
These groups were both acquired by TRW, an engineering and electronics conglomerate that also launched their consumer credit reporting branch as Experian.
Experian was acquired by the British retail company Great Universal Stores Limited (GUS) and became part of their consumer credit reporting arm. In 2006, it demerged from GUS and began trading on the London Stock Exchange.
Although Experian as we know it today did not come along until after the FCRA was passed, the bureau has certainly not been free of controversy.
In 1991, a TRW investigator incorrectly reported that 1,400 people in Vermont had not paid their property taxes, which ruined the credit of those consumers. Several similar cases were discovered throughout New England.
Experian became infamous for their atrocious customer service and was hit with several lawsuits.
Later, Experian settled with the Federal Trade Commission (FTC) for operating a credit reporting scam in which consumers were led to believe they were signing up for a “free credit report” and were not told that they would automatically be enrolled in Experian’s $80 credit monitoring program.
The offending for-profit website, FreeCreditReport.com, is still in operation. As a reminder, the only site authorized to provide free credit reports as required by federal law is annualcreditreport.com.
They settled with the FTC again in 2005 for violating their previous settlement.
In 2015, Experian announced a data breach that existed for over two years and affected as many as 15 million consumers.
The bureau was then fined $3 million in 2017 for deceiving customers about their credit scores, along with TransUnion and Equifax.
TransUnion originally began as the holding company for a rail transportation equipment company in 1968. One year later, they entered the credit reporting industry by acquiring regional credit bureaus. The bureau has expanded steadily since then, although it is the smallest of the three major credit bureaus.
TransUnion has also been guilty of taking advantage of consumers.
Two consumers have sued TransUnion for refusing to remove inaccurate information on their credit reports.
They have also been accused of scamming consumers by not notifying them that they would be charged $18 a month for having a TransUnion account.
In June 2017, the largest FCRA verdict to date forced TransUnion to pay $60 million in damages to consumers who were erroneously included on a government list of terrorists and security threats.
Later in 2017, one of TransUnion’s websites was hijacked and made to redirect consumers to websites that attempted to download malware onto visitor’s computers.
Equifax was started in 1898 by a grocery store owner who created a list of creditworthy customers and sold the list to other businesses. This business grew and became known as the Retail Credit Company.
The company expanded quickly throughout North America, amassing credit files on millions of Americans by the 1960s.
The Retail Credit Company developed a reputation for collecting extensive personal information on consumers and selling it to just about anyone who wanted it.
Critics accused them of reporting “facts, statistics, inaccuracies and rumors’…about virtually every phase of a person’s life; his marital troubles, jobs, school history, childhood, sex life, and political activities.”
Buyers of these reports would use them to judge the morality of individuals and avoid lending to those who they perceived as morally corrupt.
Consumers were not allowed to see their information, and many had no idea that the company had files on them in the first place.
When the company started planning to computerize their records, which would make consumer information more widely available, the U.S. Congress intervened, holding hearings that led to the Fair Credit Reporting Act being passed.
Equifax had to stop scamming consumers by lying about their identity and their motives when collecting information, among many other changes.
The Retail Credit Company changed its name to Equifax in 1975, which many speculate was a move to improve their damaged reputation after the congressional hearings.
Unfortunately for consumers, Equifax’s issues didn’t end with the Fair Credit Reporting Act. In recent years they have betrayed consumers’ trust even more egregiously.
Equifax ruined their reputation again in 2017, when their systems were breached by hackers twice, impacting hundreds of millions of consumers in the United States, Canada, and Britain.
The scam left the names, social security numbers, birth dates, addresses, driver’s license numbers, and credit cards numbers of consumers exposed for months, from May 2017 until July 2017.
Not only that, but Equifax did not disclose the breach until September of that year, giving top executives plenty of time to sell their shares of the company before going public with the announcement.
They continued to bungle their response to the breach by setting up websites that were supposed to allow consumers to determine whether they were affected by the Equifax breach but instead returned random results.
In addition, Equifax was allowed to charge fees for credit freezes in many states, which gave them the opportunity to actually make money off of this breach.
Nearly two years later, Equifax has still not been penalized or held accountable for this horrific failure in any way. In fact, they just went back to selling credit monitoring, and they are now making more money than ever.
For a fascinating in-depth investigation of the 2017 Equifax breach, listen to the podcast “Breach.”
There is virtually no end to the list of disastrous errors committed by Equifax, but here are some more of the highlights:
- The bureau repeatedly tweeted a link to a fake Equifax phishing website, directing consumers to enroll in fraud prevention services at the imposter site.
- Equifax left the private data of approximately 14,000 Argentinian consumers and staff members open to anyone who entered “admin” as the username and password for one of its online portals.
- The company removed its mobile apps from app stores in 2017 because they had security flaws that left them vulnerable to cyber attacks.
- A website operated by Equifax exposed the salary histories of tens of thousands of people to anyone that had someone’s Social Security number and date of birth, both of which were in the hands of criminals after the security breach.
- In October 2017, Equifax’s website was hacked and made to serve malware disguised as a software update, leaving visitors to the site at risk of having their computers infected by the malware.
- The company has been sued hundreds of times and fined millions of dollars by the Federal Trade Commission for violating the FCRA.
Sadly, it seems Equifax has not changed for the better since their early days of selling people’s private information to anyone and everyone, since they have allowed criminals to easily access consumer data on a massive scale.
Innovis: The Fourth Credit Bureau
Many people are completely unaware that there is actually a fourth major credit bureau called Innovis. It was founded as Associated Credit Bureaus in 1970 and changed its name to Innovis in 1997. The company is now owned by CBC companies, which purchased Innovis in 1999.
In contrast to the other consumer reporting agencies (CRAs), credit reporting is not the primary function of Innovis. In fact, Innovis does not even offer credit scores.
Innovis instead serves businesses by providing “consumer data solutions” such as identity verification, fraud prevention, receivables management, and credit information. According to finance writer Sarah Cain, Innovis’ credit reports are used primarily to compile lists of pre-approved consumers to sell to lenders for marketing pre-screened offers.
Innovis also states on their website that as a CRA, they “enable” personal solutions such as credit reports, credit disputes, fraud alerts, active duty alerts for consumers in the military, credit blocks, security freezes, and opt-outs.
What Is In Your Innovis Credit Report?
Your Innovis report, like your other credit reports, contains your personal information as well as your credit history. However, they do not receive credit information from all of the same lenders that report to the other three major credit bureaus. If you pull your Innovis credit report, you may notice that some of your credit accounts are missing, particularly revolving accounts.
Your credit report will also show inquiries if any businesses have pulled your file from Innovis.
While you can’t get your Innovis credit report from annualcreditreport.com, you can order a copy directly from the company for free once a year.
Who Uses Innovis Credit Reports?
While there are some anecdotal reports of credit card companies pulling consumers’ Innovis credit reports for lending decisions, it seems that their reports are used mostly for pre-screened marketing offers. Innovis’ services are also used by companies such as cell phone service providers.
Is CBCInnovis the Same Company?
Confusingly, there is another company owned by the same parent company as Innovis called CBCInnovis. Although CBCInnovis and Innovis share similar names, they are different companies with different functions.
Unlike Innovis and the other credit bureaus, CBCInnovis does not maintain a repository of consumer credit data. Rather, it serves as a third-party company that pulls consumers’ credit reports from Experian, Equifax, and TransUnion and compiles the information into one “tri-merge” credit report. These tri-merge reports are sold to lenders such as banks and mortgage companies.
Discrimination in Credit Reporting
You might think that discrimination in the credit system is a thing of the past, left behind with the shady information-gathering tactics of the earliest credit bureaus.
Unfortunately, although discrimination is officially prohibited by the Equal Credit Opportunity Act, inequality is still rampant in the credit industry today.
Past and present discrimination against minorities in the United States affects consumers in ways that have dramatic effects on credit scores. A study by the Federal Reserve Board revealed that on average, blacks and Hispanics have lower credit scores than non-Hispanic whites and Asians, even after controlling for personal demographic characteristics, location, and income.
The credit system further burdens those who are less privileged and provides very few opportunities for disadvantaged consumers to improve their situation.
Conclusion on the History of Credit Reporting
Credit reporting agencies have a surprisingly long and sordid history. From the 1800s to today, the consumer credit reporting industry has been plagued with bias, inaccuracies, and serious security issues.
While technological advancements have allowed the credit bureaus to expand and improve, and government regulation has been enacted to protect the rights of consumers, the system is still far from perfect.
Ultimately, the credit bureaus were built to serve lenders, not consumers, and that remains their primary purpose. We are reminded of this every time consumers are harmed by the incompetent or even outright malicious actions of the credit bureaus.
Have you been affected by a credit reporting scam or a security breach? Let us know in the comments, and please share this article if you liked it!