A local credit union XXXX XXXX, was offering 2.3 % on a five year CD. Who could pass this deal up? Went down to the grocery store where they have a cubicle to sign up. We had CD 's here in the past so they still had most of our personal information. Near the end of the Q & A signup process we were told that they need to check our credit even though we were former customers and were making a substantial deposit. So ok do it. Well we had placed a credit hold with Experian when our health insurer XXXX followed then by Experian, keeper of the XXXX information, were XXXX recently hacked. It does n't matter if you are a CD purchaser, no credit check, no new account. Back home again we lifted the security hold after paying Experian their {$10.00} ransom fee for doing so. It seems logical to me that when our data was compromised that the smart thing to do is place a hold on our credit. It is even more logical that if there are any charges for doing so the company or companies where your data was hacked should be financially responsible for everything. All we see happening is they lay off their liabilities to some " insuring '' agent who then says if your ID is stolen they will work with you to fix the problem. Gee thanks, but I think the company who allowed our information to be compromised should ultimately have total responsibility and should be subject to substantial Federally imposed penalties for allowing our information to be stolen in the first place.