Got a letter from one of Knoxville TVA Employee Credit Union's third-party marketing and communications service providers that the provider had a data breach. They informed me that my name, address, SSN and DOB were leaked. They say it happened in August, and they determined on Dec. 2 that my data was included in the stolen files.

I verified with KTVAECU that the letter was legit. They said (as I expected) that I agreed to allow them to share my data with third-parties when I signed the membership agreement and there is no opt-out.

The third-party company I've never heard of who sent me the letter referred me to another company I've never heard of for free credit monitoring. Yeah, right, we're going to give our SSNs to yet another unknown company? Don't think so. (I realize all our info is probably on the dark web already, but still.)

We never saw the "membership agreement" when we opened the account. In addition, we never saw the "Privacy policy". I went to the TVA CU in person and got copies of these documents. I also went to ORNL CU because we never got those documents from them. The teller/employee was surprised that they shared this information.

It's time to change the laws so that this information cannot be so easily shared. Time to contact Elizabeth Warren.