The blame game is underway.

Atlanta-based credit reporting agency Equifax and their software supplier are blaming each other for the massive hack attack.

Half the country could have had personal information stolen. Hackers got the Social Security numbers, birth dates and addresses of as many as 143 million Americans, putting them at serious risk of identity theft.

WSB consumer expert Clark Howard says that even if your credit was frozen, "your information could have been part of this breach."

He says the good news is that if you froze your credit before the breach, the bad guys cannot apply for credit using your name.

Credit bureaus are supposed to safeguard information, but no government agency has the authority to go in and review their security practices. Tighter federal oversight of the bureaus is needed.

Terrified consumers are signing up for identity theft protection services like LifeLock.

Since the breach, LifeLock has seen six times its usual web traffic. Lori Silverman in the Consumer Action Center says, "We don't recommend that you pay for any monitoring, just freeze your credit."

She says you can monitor your credit by yourself by using CreditKarma.com for free.