A mixed file becomes a lawsuit at the moment the bureau tells you it checked and the report did not change. This page is about that moment — what a “verified” response means, what has to be proved, and what the FCRA allows you to recover.
Why files get mixed in the first place
Credit bureaus do not match incoming account data to your file by Social Security number alone. They match on a combination of identifiers — name, address history, date of birth, and a partial Social Security number — and that matching is done at volume, automatically.
The result is a predictable set of victims:
- People who share a common surname with someone in the same region
- Fathers and sons with the same name, where the suffix is dropped
- People whose Social Security numbers differ by one or two transposed digits
- People who have lived at an address a namesake also lived at
- People with a name that is frequently misspelled in the same way
None of that is your error, and none of it is something you can prevent by managing your own credit carefully. The same name-driven matching failure also produces false OFAC alerts — sanctions-list flags on people who merely share a name with someone on the government’s list.
What makes it a claim rather than a complaint
Two duties in the Fair Credit Reporting Act do the work in a mixed file case.
The first applies before you say anything. Whenever a consumer reporting agency prepares a consumer report, it must follow reasonable procedures to assure maximum possible accuracy of the information about the person the report concerns. Matching two people’s histories into one file is squarely a question about those procedures.
The second applies once you dispute. The agency must conduct a reasonable reinvestigation and record the current status of the disputed information, within 30 days of receiving your notice — extendable by no more than 15 further days if you send additional relevant information inside that window. If the item is found to be inaccurate or cannot be verified, the agency must promptly delete or modify it and notify the furnisher.
A mixed file case is usually built on the second duty, because the paperwork shows it. You told them the account was not yours, they came back and said it was, and nothing changed.
Deleted, then back again
Mixed files have a habit of reappearing. The statute anticipates that: once an item has been deleted after a dispute, it may not be reinserted unless the furnisher certifies that the information is complete and accurate, and if it is reinserted the agency must notify you in writing within five business days, with the furnisher’s name and contact details.
If an account you already had removed is back on your report and no such notice arrived, keep both versions of the report. That sequence is worth documenting.
The furnisher may be liable too
When the bureau forwards your dispute, the company that supplied the account — the lender, the servicer, the collector — has its own statutory duties. It must investigate the disputed information, review all relevant information the agency sent with the dispute, report its results back, and, where the information turns out to be inaccurate or incomplete or cannot be verified, modify it, delete it, or permanently block its reporting. It has to do all of that inside the same 30-day window the agency is working to.
So a mixed file can produce more than one defendant, and which one is answerable depends on where the process failed. Our page on suing a credit bureau sets out that division in more detail. The mixed credit report lawyer page explains how a case is taken from the failed dispute to the complaint.
What you may recover
For a negligent violation, a consumer may recover any actual damages sustained as a result of the failure, together with the costs of the action and reasonable attorney’s fees as determined by the court.
For a willful violation, a consumer may recover actual damages or statutory damages of not less than $100 and not more than $1,000, plus such punitive damages as the court may allow, and again costs and reasonable attorney’s fees.
In mixed file cases the actual damages are often the part people underestimate. A denied mortgage is the obvious one, but so is a higher rate on the loan you did get, a security deposit you were told to double, a job offer that went quiet after a screening report, and months of your own time spent proving you are not the other person. The general framework is set out on our page about the FCRA lawsuit.
An action must be brought no later than two years after you discover the violation, or five years after the violation occurred, whichever comes first.
What to keep
- Reports from all three bureaus, with the dates you pulled them
- The disputes you sent, and proof of when they were sent
- Every response, particularly any that says the item was verified
- Any notice of reinsertion — and a note if none arrived
- Denial letters, adverse action notices, and anything showing the rate or terms you were given
If you would like to understand the underlying problem before the litigation question, our explainer on the mixed credit report covers how these files form and what a dispute should say.
How we handle mixed file cases
1. We review all three of your credit reports. A mixed file at one bureau doesn’t always mean the same problem at the others — we identify every piece of information that isn’t yours across TransUnion, Experian, and Equifax.
2. We build a documented dispute. Not a form letter — a thorough dispute with supporting evidence, sent by certified mail, that both demands correction and preserves the record for court.
3. If the bureaus fail to fix it, we sue under the FCRA. The law requires bureaus to follow reasonable procedures to assure maximum possible accuracy and to genuinely investigate your dispute. When they don’t, you may recover actual damages, statutory damages, punitive damages — and the bureaus pay the attorney’s fees.
Steps you can take right now
First, obtain current copies of all three of your credit reports. Identify every piece of information that is not yours — personal details, accounts, and credit inquiries. Contact any unfamiliar creditors, ask for documentation, and tell them the account isn’t yours. Keep detailed notes of every communication, with dates. Then send written disputes, with your supporting documents attached, to each bureau reporting the false information — by certified mail:
- TransUnion — TransUnion Consumer Solutions, P.O. Box 2000, Chester, PA 19016-2000
- Experian — P.O. Box 4500, Allen, TX 75013
- Equifax — P.O. Box 740256, Atlanta, GA 30374-0256
And speak with a consumer law attorney who focuses on the Fair Credit Reporting Act — the dispute you send today shapes the lawsuit you may need tomorrow.
Juries have held reporting companies accountable
$1.8 million. Judgment in Miller v. Equifax, where Equifax spent two years failing to fix false accounts and identifying information on Julie Miller’s report. The July 2013 jury returned $18.6 million; the court reduced the punitive award to $1,620,000, leaving a judgment of roughly $1.8 million.
$2.1 million. Judgment in Larios v. Specialized Loan Servicing. A servicer’s identifier match placed a stranger’s bankruptcy on Mr. Larios’s own mortgage tradeline and blocked his refinance. The April 2022 jury returned $2.9 million; the judgment was later amended to $2.105 million, and the case resolved on appeal.
Results from published court decisions involving other firms and parties. Every case is different; prior results do not guarantee similar outcomes.
How mixed files happen, and what regulators have found
The matching rules that merge two people’s records, the circumstances in which it happens most often — fathers and sons who share a name, family members at one address, twins, common surnames — and the court decisions and government enforcement actions that shaped this area are set out below. If you are still working out how a stranger’s account reached your report, read on. If it has already cost you a loan, a lease or a job, the claim itself is what the rest of this page addresses.
Who mixed files happen to most
The circumstances are predictable enough to describe as categories.
Fathers and sons who share a name. This is the single most common pattern and the oldest one documented in the case law. A Junior and a Senior share a first name, middle name and surname; they frequently share an address for part of their lives; and the suffix that distinguishes them is the field most often dropped, truncated or ignored. A generational suffix is exactly one character of distinguishing information in a field many systems treat as optional. Where the two also share a birth month, or where one of them has thin file history, the score can clear the threshold on name and address alone.
Family members at a shared address. Address is heavily weighted in matching because it is genuinely informative — but everyone in a household shares it. Spouses, adult children living at home, and siblings all present the same address, and where surnames match too, only the first name and date of birth are doing any work. Marriage compounds this, because a name change creates a second legitimate name for one person and a period during which both names are in circulation.
Twins. Twins present the worst possible combination of inputs: identical surname, identical date of birth, identical address history for the first two decades of life, often similar or rhyming first names, and Social Security numbers issued at the same time and place, which historically meant numerically adjacent. Almost every high-weight field agrees. The distinguishing information is the first name and a small number of digits.
Common surnames. The scale problem here is easy to underestimate. When the CFPB analyzed name-only matching in 2021 it pointed to the 2010 census figure of roughly 2.4 million people in the United States sharing the surname Smith. Matching on name alone in a population that size is not matching at all. The same holds for the most common Hispanic and East Asian surnames, where a small number of surnames cover a very large share of the population, and where Western name-order conventions and paternal-plus-maternal surname structures create additional ways for a name to be recorded two different ways for the same person.
Thin or shared identifiers. Young adults, recent immigrants, people who have used an Individual Taxpayer Identification Number, and anyone with little credit history has fewer records anchoring the file, so a single misrouted tradeline represents a much larger share of the file and is harder to contradict. Where a Social Security number has been transposed by a data entry error at a single creditor, that transposed number can begin to appear as an alternate identifier associated with the file, and it can pull in records belonging to whoever actually holds it.
Name changes, adoption and estrangement. A person who changed names, or who was adopted, may be matched to records belonging to a biological relative they have no relationship with and no knowledge of. The plaintiff in one of the leading employment screening cases was born under one surname and later carried another; the screening report matched him to a registry record belonging to his estranged biological father, on name alone.
Name-only matching, and why regulators singled it out
The most explicit regulatory statement on mixed files concerns the narrowest and most aggressive version of the matching problem. In an advisory opinion published at 86 Fed. Reg. 62468 on November 10, 2021, titled Fair Credit Reporting; Name-Only Matching Procedures, the CFPB stated that name-only matching is not a procedure that assures maximum possible accuracy, and consumer reporting agencies that use name-only matching violate section 607(b) of the Fair Credit Reporting Act. That is the statutory provision requiring agencies to follow reasonable procedures to assure maximum possible accuracy when they prepare a consumer report. The CFPB withdrew that opinion on May 12, 2025, so it no longer states the Bureau’s position; section 607(b) itself is unchanged.
The opinion did not arrive in a vacuum. It followed two decades of litigation over watchlist screening, where agencies compared a consumer’s name against government lists of sanctioned persons and returned a hit based on name similarity alone, without comparing dates of birth or any other identifier that was sitting right there in the file.
In Cortez v. Trans Union, 617 F.3d 688 (3d Cir. 2010), Sandra Cortez went to buy a car and was held at the dealership for roughly six and a half hours while the transaction stalled. Her file carried an alert associating her with a name on the Treasury Department’s Specially Designated Nationals list — “Cortes Quintero, Sandra” — a person born in June 1971. Cortez was born in May 1944, and the middle name did not match either. The similarity that generated the alert was between the names alone. A jury awarded $50,000 in actual damages and $750,000 in punitive damages; the district court remitted the punitive award to $100,000, and the Third Circuit affirmed both the liability finding and the remitted award.
The same design produced the largest FCRA class judgment on record and then the decision that unwound most of it. In TransUnion LLC v. Ramirez, 594 U.S. 413 (2021), the agency’s OFAC Name Screen Alert compared a consumer’s first and last name against the list — and nothing else. The certified class ran to 8,185 members, of whom 1,853 had a report containing the alert actually disseminated to a third party. The jury awarded $984.22 in statutory damages and $6,353.08 in punitive damages per class member, roughly $60 million in total. The Ninth Circuit, at 951 F.3d 1008, reduced the punitive component to $3,936.88 per member, bringing the judgment to roughly $40 million. The Supreme Court then held, 6–3, that the class members whose reports were never disseminated had not suffered concrete harm and therefore lacked standing to sue in federal court. Justice Kavanaugh’s formulation — no concrete harm, no standing — has governed FCRA class litigation ever since.
Ramirez is worth understanding precisely, because it is routinely described as though it decided that inaccurate files are not actionable. It did not. It decided who may bring the claim in federal court. A consumer whose mixed file was actually sent to a lender, a landlord or an employer is on the disseminated side of that line, and the 1,853 class members on that side had their judgment left intact.
The verdicts and settlements that shaped this area
Mixed file law is unusual in that its foundational case is more than forty years old and its facts would be entirely recognizable today.
Thompson v. San Antonio Retail Merchants Association, 682 F.2d 509 (5th Cir. 1982). William Daniel Thompson Jr. owed $77.25 to Gordon’s Jewelers. That delinquent account was captured into the file of William Douglas Thompson III — a different man, with a different middle name, a different generational suffix and a different Social Security number. The mechanism the court examined was the agency’s “automatic capture” procedure, which pulled records into files without requiring the identifiers to agree. The Fifth Circuit affirmed an award of $10,000 in actual damages plus $4,485 in attorney’s fees. The dollar figures are small by modern standards; the holding is not, because it established that an agency’s matching procedure is itself the thing being judged under section 607(b), and that a procedure which merges records over a suffix mismatch and a Social Security number mismatch is not reasonable.
Philbin v. Trans Union Corp., 101 F.3d 957 (3d Cir. 1996). A father-and-son mixed file, between James R. Philbin Sr. and James R. Philbin Jr. The case is cited constantly, but not for a damages award — there was none. The Third Circuit reversed a grant of summary judgment against the consumer and remanded, holding among other things that a consumer can establish causation for a credit denial without producing testimony from the lender that the mixed report was the reason. That evidentiary point is why the case still matters: it removed a proof requirement that would have made most mixed file claims unwinnable at the summary judgment stage.
Miller v. Equifax Information Services, No. 3:11-cv-01231-BR (D. Or.). This is the case most often cited for a headline number, and the headline number is not what the plaintiff kept. On July 28, 2013 a federal jury in Oregon returned $180,000 in compensatory damages and $18.4 million in punitive damages — about $18.6 million — after evidence that the agency had failed over roughly two years to correct accounts belonging to someone else. In late January 2014 the court remitted the punitive award to $1,620,000, a nine-to-one ratio to the compensatory award, leaving a judgment of approximately $1.8 million, and on May 23, 2014 awarded $302,002.50 in attorney’s fees. Anyone evaluating what a mixed file case is worth should work from the post-remittitur figure. Constitutional limits on punitive damages ratios apply to FCRA verdicts like any other, and a nine-to-one ratio is at the outer edge of what courts sustain.
Erickson v. First Advantage Background Services Corp., 981 F.3d 1246 (11th Cir. 2020). This one is a defense win, and it is more instructive than most plaintiff victories. Keith Erickson, born Keith Dodgson, was matched in an employment screening report to a Pennsylvania sex offender registry record belonging to his estranged biological father. The registry the screening agency drew from did not carry full dates of birth, so the match was made on name. The report disclosed on its face that it was a name-only match. The Eleventh Circuit affirmed judgment as a matter of law for the screening agency, analyzing the claim under section 1681e(b) — the accuracy standard — and concluding on that record that the procedures were not unreasonable given the disclosure. No damages were awarded. The practical lesson is that what an agency disclosed about the limits of its own match, and what the underlying source database actually contained, can decide the case; and that a consumer contesting a name-only match should preserve exactly what the report said on its face.
Sloane v. Equifax Information Services, 510 F.3d 495 (4th Cir. 2007). Frequently listed as a mixed file case, and it is not one — it arose from identity theft by a similarly named hospital employee, Shovana Sloan, rather than from an agency merging two files. It belongs on this list anyway, because of what the Fourth Circuit did with the damages. The jury awarded $351,000, comprising $106,000 in economic damages and $245,000 for emotional distress. The court held the emotional distress award excessive and remitted it to $150,000, identifying $256,000 as the maximum the record could sustain, and separately vacated a $181,083 fee award and remanded it. The case is the leading appellate authority on how much a court will let a jury award for the non-economic consequences of a corrupted credit file, which is the largest component of damages in most mixed file cases.
What government enforcement has actually said
The regulatory record on mixed files is thinner than the litigation record, and it is often described inaccurately. What follows is what the agencies actually did.
The CFPB’s December 2012 white paper, Key Dimensions and Processes in the U.S. Credit Reporting System, is the foundational government description of the problem. It defines the term, and it explains the matching architecture — including that tradelines are assigned to the best available match even when identifiers do not fully agree. For a consumer trying to explain to a court or a bureau why the wrong record is in the file, the regulator’s own account of the mechanism is more useful than any secondary source.
Supervisory Highlights, Issue 14 (March 2017) was a consumer reporting special edition, and it reported supervisory findings on mixed file testing and on the adoption of stricter identity-matching criteria at examined entities. Supervisory findings are not public enforcement actions and do not name the companies, but they establish that the regulator examined this specific failure mode and required changes.
The state attorney general settlements of 2015 are the most consequential regulatory intervention, and they are two separate agreements that are constantly conflated. On March 9, 2015 the New York Attorney General reached a settlement with the three nationwide agencies that produced the National Consumer Assistance Plan, the industry program that changed how medical debt, public records and dispute handling were treated. That agreement was New York’s alone. A separate multistate settlement followed on May 20, 2015, involving 31 states, a $6 million payment, and led by then-Ohio Attorney General Mike DeWine. The mixed file provisions are in the multistate agreement, not the New York one. That agreement requires an escalated process for handling complicated disputes, including those involving identity theft, fraud, or mixed files — described in the settlement as cases in which one consumer’s information is mixed with another’s — and requires each credit reporting agency to notify the other agencies if it finds a mixed file. That cross-notification obligation is the one most consumers have never heard of and the one most worth invoking, because a file that is mixed at one agency is very often mixed at the other two, for the same reason.
The CFPB’s annual report to Congress under section 611(e), published January 5, 2022, quantified the complaint volume. From January 2020 to September 2021 the Bureau received more than 800,000 credit or consumer reporting complaints, more than 700,000 of which concerned Equifax, Experian or TransUnion. The largest single sub-issue by volume was “information belongs to someone else” — the complaint category that captures mixed files. The Bureau does not publish a percentage for that sub-issue, so no one honestly can state one, but it is the top category out of a set that includes every other kind of credit reporting problem. The same report found the three agencies provided relief in under two percent of covered complaints in 2021, down from roughly a quarter in 2019. The Bureau’s most recent edition, published in December 2025, reported approximately 4.8 million of 5.6 million total complaints between January 2024 and June 2025 concerned consumer reporting, with roughly 3.9 million about the three nationwide agencies, characterized as an almost 3,000 percent increase since January 2020.
The FTC’s Section 319 accuracy study is the most-cited and most-misquoted data set in this field. Congress directed the FTC to study credit report accuracy, and the study surveyed 1,001 participants across 2,968 reports. Four distinct figures come out of it and they are not interchangeable. Twenty-six percent of participants identified at least one potentially material error. Twenty-one percent had a report modified after dispute — this is the “one in five” figure the press coverage used. Thirteen percent saw a credit score change. And 5.2 percent had an error corrected that moved them into a better credit risk tier, meaning it could have affected the terms of credit they were offered. The fifth interim report was issued in December 2012 and announced on February 11, 2013; the sixth interim and final reports followed in January 2015, announced January 21, 2015.
Two older FTC actions are commonly miscited in this context and should not be relied on as accuracy penalties. On January 13, 2000 the FTC obtained $2.5 million in total penalties — $1 million each from Experian and TransUnion, $500,000 from Equifax — for failing to staff their toll-free consumer telephone lines adequately, a violation of FCRA section 609(c)(1)(B). On July 30, 2003 Equifax paid $250,000 for violating that 2000 consent decree. Both concern telephone access, not file accuracy. Citing them as accuracy enforcement misstates the record, and a consumer who does so in a dispute letter loses credibility.
Why the ordinary dispute process struggles with mixed files
Most credit report disputes describe a fact about an account: the balance is wrong, the account was paid, the late payment did not happen. The reinvestigation system is built for that. It converts the dispute into a standardized code, sends it to the furnisher, and asks the furnisher to confirm or correct what it reported.
A mixed file dispute is a different kind of assertion. It says the account is not mine at all — it belongs to a different person who really does owe it. Routed through the same machinery, that dispute arrives at a furnisher who looks at its own records, confirms that the account exists and is delinquent, and verifies it. Nothing in that exchange tests the only question that matters, which is whether the agency was right to file the record to this consumer. The verification is accurate and the outcome is wrong.
This is also why mixed file entries reappear after they are deleted. If the underlying matching logic has not changed, the furnisher’s next monthly update contains the same record with the same identifiers, and the same rules route it to the same wrong file. A consumer who successfully removed an item and finds it back two cycles later has not been ignored; the file is being re-mixed. Documenting that recurrence — dated report copies before and after — is often stronger evidence than the original error, because it shows the problem is systemic rather than a one-time slip.
The practical consequence is that a mixed file dispute has to be framed as an identity question, addressed to the agency, and supported with identifiers rather than account facts. Say that the account belongs to a different person. Say what distinguishes you from that person: full legal name including any suffix, date of birth, and the fact that the Social Security numbers differ — without writing out the digits. Ask the agency to describe the procedure it used to associate the record with your file, and ask it to notify the other nationwide agencies, which the multistate settlement requires when a mixed file is found.
When a mixed file becomes a legal claim
The Fair Credit Reporting Act requires agencies to follow reasonable procedures to assure maximum possible accuracy, and to conduct a reasonable reinvestigation when a consumer disputes an item. A mixed file that survives a properly framed written dispute is evidence that at least one of those obligations was not met, and the case law from Thompson forward has consistently treated the matching procedure itself as the thing to be examined. Damages in these cases are typically dominated by the non-economic harm — the denial, the delay, the time spent, the effect of being told repeatedly that a stranger’s debt is yours — and Sloane remains the leading discussion of what courts will sustain on that element. Where the agency knew of the error and left it uncorrected, as in Miller, punitive damages are available, subject to the ratio limits that reduced the award in that case.
I handle these claims nationwide, and the broader FCRA practice covers the related failures that often accompany a mixed file, including credit reporting errors generally, identity theft where a real fraud sits underneath the merge, and deceased indicators reported on living consumers, which is a mixed file problem with a particular and unusually severe consequence.
Common questions about mixed file cases
How do I know if my credit report is mixed with someone else’s?
Look for accounts, addresses, name variations, or Social Security numbers that are not yours — or identity-verification questions about accounts you never had. Any one of these is a red flag that another person’s data has been merged into your file.
Can I fix a mixed credit report myself?
You can and should dispute the errors directly with each bureau by certified mail. But mixed files are among the hardest errors to fix — automated reinvestigations often re-merge the same wrong data. If a properly documented dispute doesn’t fix it, the bureau may be violating the FCRA.
What compensation is available in a mixed file case?
The FCRA allows recovery of actual damages (denied credit, higher rates, lost opportunities, emotional distress), statutory damages of $100 to $1,000 per willful violation, punitive damages in egregious cases — plus attorney’s fees paid by the defendants.
What does it cost to hire you?
Nothing out of pocket. We handle FCRA cases on contingency — our fees come from the credit bureaus and furnishers when we win. If we don’t win, you don’t pay.
How long do I have to bring an FCRA claim?
Generally two years from when you discover the violation, and no more than five years from when it occurred. If you’ve found a mixed file, don’t wait — contact us for a free case review.
This practice area is part of our broader FCRA practice — see how the Fair Credit Reporting Act protects you and makes the violator pay your legal fees.
Speak to us about your file
The Kim Law Firm represents consumers in Fair Credit Reporting Act cases involving mixed files, against the credit bureaus and against the furnishers that supply them. Send us the reports, the disputes you filed, and the responses you received, and we will tell you whether we see a claim.
You pay nothing unless we win.
Contact us to have your file reviewed.
Admitted in Pennsylvania and New Jersey; available to appear pro hac vice in other federal courts.