Credit Bureaus (U.S.) — NAICS Industry Primer

NAICS 2022 code 56145. A short rollup guide for both public-market and private investors. This level contains exactly one child industry, 561450, so it is effectively identical to that child; for the full treatment see the 561450 primer.

---

1. Overview

A credit bureau — the government's formal term is a consumer reporting agency (CRA) — collects records of how people and businesses borrow and repay, packages that history into a report or a score, and sells it to lenders, landlords, employers, insurers, and others who need to judge creditworthiness. When you apply for a mortgage, a car loan, a credit card, or an apartment, someone pulls your file from one of these companies.

The appeal is a self-reinforcing data engine: the bureau's core asset — decades of borrowing history on essentially every adult in the country — is contributed for free by the same lenders who then pay to read it back. That reciprocity is very hard to rebuild, so the business earns high margins and behaves like a toll booth on the credit economy. The main drawback is that toll traffic rises and falls with lending, especially mortgages.[1]

---

2. What's inside — and why this level equals its one child

In the North American Industry Classification System (NAICS), a 5-digit "industry" normally groups several 6-digit "national industries." Here there is only one:

• 561450 — Credit Bureaus (the sole child)

Because 56145 has a single child, the two codes cover exactly the same establishments and carry the same statistics; the 5-digit level is a pass-through. Everything specific — the four-layer structure (the "big three" nationwide consumer bureaus Equifax, Experian, and TransUnion; the dominant scoring firm Fair Isaac/FICO; business-credit bureaus led by Dun & Bradstreet; and 40-plus nationwide specialty CRAs), the contributory-data economics, the regulatory regime, and the investable names — lives in the 561450 primer. This page gives the rollup figures and points you there.[1]

Scope note. The code covers establishments that compile credit and employment histories and sell them to those evaluating creditworthiness. Adjacent activities sit elsewhere: debt collection (561440), general background checks that aren't consumer reporting (561611), and data processing (518210). Credit-scoring software (FICO) and bond/securities rating agencies (Moody's, S&P, Fitch) also fall outside this code.[1]

---

3. Size (rollup figures)

Federal statistics for NAICS 56145 — identical to child 561450 — from our ground-truth data:[3][4]

The four largest firms take three-quarters of revenue and the top twenty take essentially all of it; an HHI near 1,560 places the industry in the "moderately concentrated" band — and that understates consumer credit specifically, where three firms dominate. Figures are not perfectly year-matched: receipts and concentration are 2022 (Economic Census), while establishments, employment, and payroll are 2023 (County Business Patterns). (The related Small Business Administration size standard for this activity is $41 million in annual receipts, set at the 561450 level.)[5]

Undercount caveat — but a reverse one. Most primers flag governments undercounting industries full of tiny or informal operators. Here the count is clean, but the firms popularly called "credit bureaus" are far larger than the $14.67 billion the code captures: much of their revenue is analytics, fraud and identity, marketing, and international work booked under other NAICS codes, and FICO's scoring revenue is excluded entirely. So the federal number accurately measures the narrow industry but understates the economic weight of the companies.[3]

---

4. Investable universe (where value concentrates)

With one child, all of this level's investable value sits in that child. There is no cheap small-cap "credit bureau" — this is a concentrated, large-cap, high-quality oligopoly. The pure public-market plays are a small handful of large firms; beyond them is a long tail of privately held specialty bureaus, several owned by private equity. The full company table, tickers, and private owners are in the 561450 primer, Sections 4 and 10.[6][7][8]

---

5. How the money works

The economics are the child's economics, in brief:[8]

• The data is free; reading it is not. Lenders furnish borrower data at no charge under a reciprocity system — a contributory data model that a new entrant cannot replicate. That is the moat.
• Revenue is transactional and volume-driven. Bureaus charge per report pulled, per score delivered, and per batch screened, with subscriptions (analytics, fraud/identity, consumer monitoring) layered on top to smooth the swings.
• Incremental margins are very high. Because the data is already collected, each additional report costs almost nothing; the listed bureaus run adjusted-EBITDA (earnings before interest, taxes, depreciation, and amortization) margins in the mid-30s to low-40s percent, and FICO's per-score royalty runs operating margins near 90%.[9]

The right analogue is a data network with transaction-sensitive demand and high fixed technology and compliance costs — not a factory's capacity utilization or a retailer's same-store sales.

---

6. Demand drivers

• Lending volume, above all — reports and scores are pulled when credit is granted, so demand tracks mortgage, auto, card, and personal-loan originations. Mortgage is the swing factor.
• Commercial and supplier credit — business-to-business and trade-credit checks (Dun & Bradstreet's core), a less consumer-cyclical pool.
• Employment and income verification, fraud and identity, insurance underwriting, and consumer self-monitoring — growth pools that expand somewhat independently of the credit cycle.
• New data and mandates — alternative data (rent, utilities, cash flow) widens the scorable population, and decisions by mortgage giants Fannie Mae and Freddie Mac about which scores to accept can shift demand overnight.[8]

---

7. Regulation

Credit bureaus are among the most heavily regulated data businesses in the country. The Fair Credit Reporting Act (FCRA, 1970) governs accuracy, disputes, "permissible purpose," and adverse-action notices; the Fair and Accurate Credit Transactions Act (FACTA, 2003) added free reports, fraud alerts, and security freezes; the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission (FTC) Safeguards Rule impose privacy and data-security duties. The Consumer Financial Protection Bureau (CFPB) and FTC share oversight.[14][15] The regulatory pendulum swung toward deregulation in 2025 (a vacated medical-debt rule; a withdrawn data-broker rule), a live theme covered in the child primer, where the 2017 Equifax breach settlement (at least $575 million) is the cautionary reference case.[17][13][14]

---

8. Consolidation

A stable oligopoly with barriers — data reciprocity, identity resolution, permissible-purpose credentialing, FCRA compliance, and scale — that are close to insurmountable, so the roster has barely changed in decades. Growth increasingly comes from buying specialty data and analytics firms. The headline 2025 move was private equity's: Clearlake Capital took Dun & Bradstreet private for $7.7 billion (including debt). The active competitive story is the scoring tug-of-war between FICO and the bureau-owned VantageScore, reshaped in 2025 by regulators allowing VantageScore 4.0 on GSE mortgages and by FICO's pivot to license scores directly to resellers — all detailed in the 561450 primer.[11][16][17]

---

9. Risks

Cyclicality (volumes tied to lending, mortgage especially); cybersecurity (a serious breach is existential); regulatory and political risk in both directions; accuracy and dispute liability under the FCRA; disintermediation and free-data competition (FICO reaching resellers directly; open-banking/cash-flow underwriting); customer concentration and pricing pressure; data-input erosion; antitrust scrutiny of a tri-opoly on sensitive data; and private-equity leverage at sponsor-owned platforms. Each is expanded in the child primer.[8]

---

10. How to invest and outlook

Because this level equals its one child, the investing approach is identical to 561450's. Public routes: Equifax (NYSE: EFX) and TransUnion (NYSE: TRU) for the bureaus, Fair Isaac (NYSE: FICO) for the scoring franchise, and Experian (LSE: EXPN; U.S. over-the-counter ADR EXPGY) for the largest by revenue. These are growth-and-quality names, not income plays. Private routes are largely closed for nationwide bureaus — the realistic plays are private-equity data vehicles and venture bets on the fintechs building the alternative to traditional reports. Specific tickers, market values, dividend yields, valuation multiples, and diligence questions belong in that company-specific analysis, laid out in the 561450 primer, Section 10.[6][7][8][11]

The through-line: toll-booth businesses on the credit economy — durable, high-margin, and defensible — but priced accordingly, exposed to the mortgage cycle, and, for the first time in years, facing genuine competition over the score at the center of the system. For everything beyond this summary, read the 561450 primer.

---

Sources

1. U.S. Census Bureau, 2022 NAICS — 561450 Credit Bureaus (definition), 2022. https://www.census.gov/naics/?input=561450&year=2022
2. Consumer Financial Protection Bureau, List of Consumer Reporting Companies, 2024-2025. https://files.consumerfinance.gov/f/documents/cfpb_consumer-reporting-companies-list.pdf
3. U.S. Census Bureau, 2022 Economic Census — Concentration of Largest Firms, NAICS 561450 (receipts, firms, CR4/CR8/CR20/CR50, HHI). https://data.census.gov/table/ECNSIZE2022.EC2200SIZECONCEN
4. U.S. Census Bureau, County Business Patterns, NAICS 561450 (establishments, employment, payroll), 2023. https://data.census.gov/table/CBP2023.CB2300CBP
5. U.S. Small Business Administration, Table of Small Business Size Standards, NAICS 561450 ($41 million), 2023. https://www.sba.gov/document/support-table-size-standards
6. Equifax Inc., Full-Year 2024 Results, 2025. https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000033185&type=8-K
7. Experian plc, Full-Year Results FY26 (year ended 31 March 2026), 2026. https://www.experianplc.com/newsroom/press-releases/2026/full-year-results-fy26
8. TransUnion, Fourth Quarter and Full-Year 2024 Results / 2025 Annual Report. https://www.globenewswire.com/news-release/2025/02/13/3025706/0/en/TransUnion-Announces-Fourth-Quarter-and-Full-Year-2024-Results-and-Refreshed-Capital-Allocation-Framework.html
9. Fair Isaac Corporation, Form 10-K, Fiscal 2024 / 2025 (Scores segment). https://www.sec.gov/Archives/edgar/data/814547/000162828024045719/fico-20240930.htm
10. Dun & Bradstreet Holdings / Clearlake Capital, Acquisition completion, 2025. https://www.sec.gov/Archives/edgar/data/1799208/000110465925082892/tm2524330d1_ex99-1.htm
11. Federal Trade Commission, Fair Credit Reporting Act. https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act
12. Federal Trade Commission, Gramm-Leach-Bliley Act / Safeguards Rule. https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act
13. Federal Register, Prohibition on Creditors and Consumer Reporting Agencies Concerning Medical Information (Regulation V), Jan. 2025; and July 2025 court vacatur. https://www.federalregister.gov/documents/2025/01/14/2024-30824/prohibition-on-creditors-and-consumer-reporting-agencies-concerning-medical-information-regulation-v
14. Federal Register, Protecting Americans From Harmful Data Broker Practices (Regulation V); Withdrawal of Proposed Rule, May 2025. https://www.federalregister.gov/documents/2025/05/15/2025-08644/protecting-americans-from-harmful-data-broker-practices-regulation-v-withdrawal-of-proposed-rule
15. Federal Trade Commission, Equifax to Pay $575 Million as Part of Settlement Related to 2017 Data Breach, 2019. https://www.ftc.gov/news-events/news/press-releases/2019/07/equifax-pay-575-million-part-settlement-ftc-cfpb-states-related-2017-data-breach
16. VantageScore / Federal Housing Finance Agency, VantageScore 4.0 Allowed for Use on All Fannie Mae and Freddie Mac Mortgages, 2025. https://www.prnewswire.com/news-releases/vantagescore-4-0-allowed-for-use-on-all-fannie-mae-and-freddie-mac-mortgages-effective-immediately-302500383.html
17. CNBC, FICO provider is shaking up its credit score business; its stock is surging, 2025. https://www.cnbc.com/2025/10/02/fico-provider-is-shaking-up-its-credit-score-business-its-stock-is-surging.html