Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
You cannot place a universal freeze directly on a medical chart. In the United States, the actionable security freeze is placed separately with Equifax, Experian and TransUnion to restrict most new-credit access. Medical identity theft also requires a second track: obtaining records, correcting inaccurate clinical or claims information, disputing medical collections and reporting the incident through the federal recovery process.
Use the sequence below to address both the credit risk and the medical-record risk without confusing one remedy for the other.
What a “medical information freeze” actually is
A security freeze is a restriction on a consumer-reporting agency’s disclosure of your credit report. It is not a lock on a hospital chart, pharmacy file, insurance account or Medicare record, and it does not delete information already held by a provider or insurer.
The Federal Trade Commission defines medical identity theft this way:
#1 Best Overall
“Medical identity theft is when someone uses your personal information — like your name, Social Security number, health insurance account number or Medicare number — to get medical care, see a doctor, get prescription drugs, buy medical devices, or submit claims with your insurance provider.”
A credit freeze is therefore one part of a response. It can make it harder for a thief to open new credit in your name, but it will not correct a wrong diagnosis, remove a fraudulent prescription from a chart, stop misuse of an existing insurance benefit or resolve a medical collection that is already being reported.
Choose the response based on what was exposed
Start by identifying both the information involved and the harm you can see. The organization that controls the record determines where your written dispute must go.
| What may be exposed | Warning signs | Organization to contact | First action |
|---|---|---|---|
| Social Security number or other identity data | Unknown credit inquiries, accounts or applications | Equifax, Experian and TransUnion | Place a security freeze with all three bureaus and review each credit report. |
| Health-insurance account number or Medicare number | Unfamiliar Explanation of Benefits statements, claims, supplies or visits | Your health insurer, Medicare-related administrator and the providers named in the claim | Call the insurer, request claim details and ask the named providers for records. |
| Clinical chart, prescriptions or diagnoses | Visits, services, medicines or diagnoses you never received | Each doctor, clinic, hospital, pharmacy or laboratory holding the entry | Request the relevant records, then send a written correction request to every holder of the error. |
| Billing information or medical debt | Unknown account balances, collection calls or medical collections on a credit report | The provider, billing company, debt collector and the credit bureaus reporting the item | Obtain account documentation, dispute the debt through the IdentityTheft.gov process and challenge inaccurate credit-report data. |
Several categories can overlap. For example, a stolen Social Security number can lead to both a new credit account and fraudulent medical care. In that situation, complete the credit-freeze steps and the provider, insurer and record-correction steps rather than choosing only one.
Step 1: Place a freeze with all three credit bureaus
You must contact Equifax, Experian and TransUnion separately. A request made to one bureau does not freeze the other two. The freeze is free and stays in place until you remove it or temporarily lift it.
- Use each bureau’s official freeze channel. Submit the request through its secure electronic process or by telephone. If you use mail, follow the bureau’s identity-verification and address instructions exactly.
- Record the confirmation. Save the confirmation number, account credentials, any security PIN or password, and the date of the request for each bureau. You will need these details to manage a lift or removal later.
- Allow for the statutory processing times. A telephone or secure electronic request must be completed within one business day. A mailed request may take up to three business days. The bureau must send confirmation and instructions for removing the freeze within five business days.
- Check that all three confirmations arrive. If one bureau does not confirm the request within the applicable period, contact that bureau again and keep proof of the original submission.
When you apply for legitimate credit later, a lender may need access to a report. Use the bureau’s freeze-management process to arrange a temporary lift for the period or lender you choose, then confirm that the restriction is active again afterward. A lift for one bureau does not automatically lift the other two.
Step 2: Request every potentially affected medical record
Make a list of every organization that could have received or generated information connected with the suspected misuse:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Doctors, specialists and group practices
- Hospitals, urgent-care centers and outpatient clinics
- Pharmacies and mail-order prescription services
- Laboratories, imaging centers and medical-device suppliers
- Health insurers, Medicare-related administrators and benefits plans
- Billing companies and collection agencies named in statements or reports
Ask each organization for copies of the records, claims, prescriptions and account information associated with you. Be specific about the period you want and the suspected incident. A request for “everything” can be harder to audit than a dated request for the encounter, claim number, prescription or account shown in an alert.
Keep a tracking log with the organization’s name, department, telephone number, mailing or electronic address, the date you requested records, the date received and the documents still missing. Store the copies in a secure location and retain the originals of letters, statements and notices.
Step 3: Identify and dispute inaccurate medical information
Compare the records you receive with your own care history. Flag any visit, procedure, prescription, diagnosis, laboratory result, claim or patient-account detail that is not yours. Also look for an event that is yours but contains another person’s information, because mixed records can affect future care as well as billing.
Send a separate written correction request to each holder
- Copy the inaccurate entry. Include the page, claim, date, account number or prescription identifier that makes the error easy to locate.
- Explain the correction plainly. State what is wrong, what the record should say, and why the entry does not belong to you. If the entire encounter is fraudulent, say that directly.
- Attach supporting material. Include a government or insurer notice, statement, appointment history or other evidence that helps the organization investigate. Send copies, not irreplaceable originals.
- Use trackable delivery. Keep the delivery confirmation and a complete copy of the packet. Send the request to every provider or plan that holds the same incorrect information; one provider’s correction does not automatically amend another organization’s file.
- Track the response. FTC consumer guidance says a healthcare provider must respond to a written medical-record correction request within 30 days and notify other providers that may share the same error.
Ask for a written explanation if the organization refuses to amend the record. Keep the refusal with your evidence and send it to any insurer, billing company or provider that relied on the disputed information. A correction request addresses record accuracy; it does not replace a credit-bureau dispute or a debt dispute.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Step 4: Check your credit reports and medical collections
Obtain reports from all three nationwide credit bureaus through AnnualCreditReport.com or by calling 1-877-322-8228. Review every report for unfamiliar accounts, hard inquiries, collection entries, addresses and identifying information. A medical identity incident may appear as a collection even when the underlying care was never provided to you.
For each unfamiliar medical debt, gather the provider name, service date, account number, amount, collector’s name and any notice that identifies identity theft. Use the recovery workflow at IdentityTheft.gov to document the incident and dispute unrecognized medical debt. Follow the instructions generated for your situation and save the completed report and correspondence.
Dispute inaccurate information with every credit bureau that reports it. Identify the exact item, explain that it resulted from identity theft or does not belong to you, and attach copies of your supporting documents. Send disputes through a method that gives you a record of submission and retain the bureau’s response.
Step 5: Create an IdentityTheft.gov recovery plan
Use IdentityTheft.gov as the central recovery record even if the incident appears limited to healthcare. Enter what happened, which identifiers were exposed and which organizations have been contacted. The resulting plan helps you keep deadlines, reports and correspondence together.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Prioritize the actions according to the exposed identifier:
- Social Security number exposed: Place the three-bureau freeze first, then inspect all three credit reports for new accounts and inquiries.
- Health-insurance or Medicare information exposed: Contact the insurer and relevant providers, review Explanation of Benefits statements and request the medical records behind unfamiliar claims.
- Clinical information exposed: Request the affected chart and send written correction requests to each organization that stores the inaccurate entry.
- Billing data exposed: Obtain account records, dispute unrecognized collections and check whether the debt appears on any credit report.
Step 6: Respond when a breach exposed protected health information
When a breach involves unsecured protected health information, HIPAA-covered entities and business associates have breach-notification duties under the applicable rule. Read the notice carefully to determine which data elements were involved, the date range and the organization’s recommended contact channel.
Do not assume that a breach notice means a credit freeze alone is sufficient. If insurance information was exposed, contact the insurer and the providers named in the notice, review every Explanation of Benefits statement for unfamiliar services and request the underlying records. If a Social Security number was included, complete the three-bureau freeze and credit-report review as well.
Keep the breach notice, your call notes, claim numbers, copies of records and written disputes in one incident file. Use a separate log for each provider or insurer so that a response from one organization is not mistaken for a correction across the entire healthcare system.
Recommended Free Tools
What a security freeze does—and does not do
| Effect | What to expect |
|---|---|
| New-credit screening | Most new creditors cannot access a frozen credit report until you remove or temporarily lift the freeze. |
| Existing accounts and benefits | The freeze does not stop use of an existing credit account, insurance policy, Medicare benefit or provider account. |
| Medical charts | The freeze does not lock, delete or correct a clinical record, prescription history or claim file. |
| Fraud remediation | The freeze does not investigate a fraudulent visit, reverse a claim or remove a medical collection; those require provider, insurer, collector and bureau disputes. |
| Legitimate applications | A lender may require a temporary lift for a credit application. Manage that lift with the relevant bureau and leave the other bureaus frozen. |
Common mistakes and how to fix them
Freezing only one bureau
Problem: A single-bureau freeze leaves the other two reports available to creditors that use them.
Fix: Submit and document a separate request with Equifax, Experian and TransUnion.
Assuming the freeze repairs a medical chart
Problem: Credit access is restricted, but an incorrect diagnosis, prescription or claim remains in the provider’s system.
Fix: Request the record and send a written correction request to each organization holding the error.
Disputing only with a collector
Problem: The provider or insurer may still hold the original fraudulent record, allowing the error to reappear.
Fix: Notify the provider or plan, the collector and every credit bureau reporting the debt, using copies of the same evidence.
Relying on an Explanation of Benefits summary
Problem: A summary may not show the clinical or account details needed to identify the misuse.
Fix: Ask the insurer for claim documentation and ask the named provider for the corresponding chart, prescription or billing record.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsMissing the response window
Problem: Phone calls without dates, names or written follow-up are difficult to prove.
Fix: Use trackable written requests, maintain a deadline log and preserve confirmation numbers and delivery records.
A practical order of operations
- Today: Write down what happened, preserve notices and place freezes with all three credit bureaus if a Social Security number or other identity data may be involved.
- Next: Contact every relevant provider, pharmacy, laboratory, hospital and insurer for records, claims, prescriptions and account details.
- After records arrive: Mark entries you do not recognize and send a separate, documented correction request to each organization that holds them.
- In parallel: Pull all three credit reports from AnnualCreditReport.com, identify medical collections or new accounts and dispute each inaccurate item.
- Throughout recovery: Use IdentityTheft.gov, review insurer Explanation of Benefits statements and keep a single incident file with every response.
USA.gov’s credit-freeze instructions were last updated November 13, 2025. Freeze timing cited here comes from the 2023 U.S. Code: one business day for telephone or secure electronic requests, three business days for mailed requests and five business days for confirmation and removal instructions. FTC consumer guidance accessed in 2026 gives healthcare providers 30 days to respond to a written correction request. State privacy, breach-notification and medical-record laws may provide additional rights or different deadlines, so check the rules that apply in your state when an organization’s response conflicts with these federal time frames.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
