Via NBR/CNBC: “There are literally hundreds of smaller consumer-reporting companies [33-page PDF] operating in the U.S. and the smaller ones are collecting information you might not expect. The Consumer Financial Protection Bureau maintains a self-reported list of the companies. Consider Milliman IntelliScript, for example. The company collects information on the prescription drugs you buy. If you’ve ever authorized the release of your medical records to an insurance company, they might have shared them with Milliman. Or look at Retail Equation, a company that monitors consumers’ return and exchange behavior at retail companies. Company critics say the information collected can prevent legitimate returns from being accepted. Still, fraudulent returns are a big concern for retail companies, costing them billions of dollars a year, company reports say. The companies did not respond to requests for comment. Consumer-reporting companies are governed by the Fair Credit Reporting Act, according to the CFPB. That means consumers can request copies of their reports, though some will charge you for it.” [h/t Pete Weiss]

• The New York Times provides answers to some of the many questions causing us considerable concern following the delayed announcement by Equifax of a massive breach of personal data that impacts perhaps half of the American population.