You’re probably familiar with what you can do to protect yourself from identity theft.

But this recent hack of Instructure & Canvas by ShinyHunters highlighted how important it is that I protect my children from identity theft. It’s less common because minors can’t enter into the same financial contracts as adults.

A minor can’t open a credit card or sign a contract, so they are less attractive targets for theft.

But it’s still possible. And fortunately there are a few steps you can take to protect them. It’s not nearly as many steps as for adults, but it’s still worth considering.

Change Your Passwords

First, change Canvas passwords and any other accounts that were using the same passwords.

It’s now a good time to remind them the importance of using a secure password. They’re in the big leagues of theft now… it’s easier to fix this when they have just a handful of logins compared to later when it’s many more.

Freeze Credit Reports

As a minor, your child won’t have a credit file. This is what makes their Social Security Number doubly valuable – a thief that succeeds in using it can use it for years because no one is checking it.

You may check your report each year. I’ve never checked my childrens’ reports (and they likely don’t have one).

When you freeze their report, it’s technically known as a “protected consumer credit freeze” or a “child credit freeze.” The Children’s Online Privacy Protection Act restricts the online collection of personal information and so the bureaus can’t show you the report of anyone under 13. This is why it has to be done through the mail, even if they are over 13.

When you submit a request to freeze, the bureau will usually create a report and then freeze it. You have to submit this request to each of the bureaus individually.

NOTE: The bureaus will issue you a PIN, keep this in a safe place because you will need it to lift the freeze.

Experian

Here are the Experian instructions but all the forms lead to a way to print out what you’ll need to mail in.

There is also a way to upload the documents, scroll down on the instructions to see that process.

You will need to submit these documents:

• The printed form
• A copy of your driver’s license or another government issued identification card, such as a state ID card
• Proof of your address, such as a copy of a bank statement, utility bill, insurance statement
• A copy of your child’s birth certificate
• Proof of guardianship, if not named on child’s birth certificate
• A copy of your child’s Social Security card

Mail it to:

Experian
PO Box 9554
Allen, TX 75013

Equifax

Here are the Equifax instructions and you’ll need this form.

They require you to provide:

• Identification – copy of your driver’s license or other government-issued identification OR copy of your Social Security card OR copy of your birth certificate
• Proof of representation – copy of the child’s birth certificate OR copy of a court order OR copy of a lawfully executed and valid power of attorney OR copy of a foster care certification
• Validation of child’s identity – copy of the child’s Social Security Card OR copy of child’s birth certificate

Mail to:

Equifax Information Services LLC
P.O. Box 105788 
Atlanta, GA 30348

TransUnion

Here are the TransUnion instructions their process is fairly straightforward:

You will need to provide:

•  A written request to place a “Protected Consumer Freeze” on the named individual’s file
• 2. AND a copy of one piece of documentation that provides “sufficient proof of authority” that you have authority to act on behalf of the person such as:
  • An order issued by a court of law
  • A lawfully executed and valid power of attorney
  • A document issued by a Federal, State, or local government agency in the United States showing proof of parentage, including a birth certificate
  • With respect to a protected consumer who has been placed in a foster care setting, a written communication from a county welfare department or its agent or designee, or a county probation department or its agent or designee, certifying that the protected consumer is in a foster care setting under its jurisdiction.
• 3. AND information or copies of documentation confirming your identity AND the identity of the minor/dependent or incapacitated adult. This information or documentation needs to provide “sufficient proof of identification” that you and the minor/dependent or incapacitated adult are who you really are, such as a:
  • Social Security number or a copy of a Social Security card
  • Certified or official copy of a birth certificate issued by the entity authorized to issue the birth certificate
  • Copy of a driver’s license, an identification card issued by the motor vehicle administration, or any other government issued identification

Mail to:

TransUnion
P.O. Box 380
Woodlyn, PA 19094

Turn on Two Factor Authentication

Now is a good time to introduce your child to the wonders of two-factor authentication (2FA).

2FA is a requirement nowadays because it adds a layer of security to any account. Ideally, you want to use an authenticator app rather than text messages or email, since those can be compromised.

If your child, like our younger ones, doesn’t have a phone or email, unfortunately there isn’t any alternative unless you want to get a physical device. That might be overkill for young kids.

Warn About Phishing Attempts

Given what was taken, the most likely attacks will be phishing attempts that will get your kids to install malware on their computers or computers they have access to.

Remind them not to click on links, don’t offer up any personal information via email regardless of who is asking, and when it doubt, ask a parent or trusted adult.

Check The Credit Report Annually

From here, make sure you check their report annually.

It should be quick because with a freeze, it’ll be empty.

In this breach, there’s a good chance nothing will happen, other than a disruption to their school schedule. With a credit freeze in place, you can be sure of it.