A credit freeze is a security control that restricts access to a consumer’s credit file. Because lenders usually check that file before approving new credit, a freeze makes it much harder for someone to open accounts in your name, even if they already know personal details such as your address or date of birth.
In cyber security, credit freezes matter after data breaches because stolen identity data can be reused for impersonation, account takeover, or synthetic identity fraud. Unlike a password reset, a freeze targets the credit system itself, blocking most new-account applications until the consumer lifts it. It is a practical defense when exposed PII may be used to answer verification questions, pass manual checks, or support phishing and social-engineering scams.