Credit Bureaus (U.S.) — Industry Primer

NAICS 2022 code 561450. An investor's guide for both public-market and private investors.

---

1. Overview

A credit bureau — the government's formal term is a consumer reporting agency (CRA) — is a company that collects records of how people and businesses borrow and repay, packages that history into a report or a score, and sells it to lenders, landlords, employers, insurers, and anyone else who needs to judge creditworthiness. When you apply for a mortgage, a car loan, a credit card, or an apartment, someone pulls your file from one of these companies.

The appeal is simple: a credit bureau's core asset — decades of borrowing history on essentially every adult in the country — is contributed for free by the same lenders who then pay to read it back. That reciprocal data engine is extraordinarily hard to rebuild, so the business earns high margins and behaves like a toll booth on the entire credit economy. The main drawback is that the toll booth's traffic rises and falls with lending activity, especially mortgages.

There are two ways to gain exposure. The pure public-market plays are a small handful of large companies — Equifax, TransUnion, and the scoring company Fair Isaac (FICO) trade in the U.S., and Experian trades in London.[5][6][7][8] Beyond them the field is a long tail of privately held specialty bureaus and data firms, several owned by private-equity funds. There is no cheap small-cap "credit bureau" — this is a concentrated, large-cap, high-quality oligopoly. Details, tickers, and private owners are in Sections 4 and 10.

---

2. What it is and how it's structured

Scope. NAICS (North American Industry Classification System) code 561450 covers establishments that compile information such as credit and employment histories and sell it to those who need to evaluate the creditworthiness of individuals and businesses. It includes credit agencies, credit investigation services, credit rating bureaus, and credit reporting services.[1] The value chain has four steps: (1) data furnishers — lenders, retailers, utilities, landlords — submit account information; (2) bureaus match, cleanse, standardize, and enrich it; (3) bureaus sell reports, scores, analytics, fraud tools, identity verification, and monitoring; (4) end users apply the information to origination, pricing, account management, collections, marketing, hiring, housing, and fraud prevention. The consumer is usually the subject of the data, not the paying customer.

In practice the industry has four layers:

• The "big three" nationwide consumer bureaus — Equifax, Experian, and TransUnion — each holding a broadly overlapping file on most U.S. adults. Because their records differ at the margin, mortgage lenders traditionally pull all three (a "tri-merge").
• The dominant scoring company, Fair Isaac (FICO) — technically a software/analytics firm, not a bureau (its data comes from the bureaus), but the FICO score it licenses is the industry's reference currency. It is included here because no credit-bureau thesis is complete without it.
• Business-credit bureaus — chiefly Dun & Bradstreet, which rates companies rather than consumers.
• Nationwide specialty CRAs — 40-plus firms the Consumer Financial Protection Bureau (CFPB) tracks that report on narrower slices: bank-account history (ChexSystems), tenant and employment screening, insurance-claims history, medical, utility, and check-writing data. Examples include LexisNexis Risk Solutions, Innovis, and Equifax's own The Work Number.[2]

What it excludes. Several adjacent activities sit in other NAICS codes: debt collection (561440, Collection Agencies — bureaus report debts but do not chase them), repossession (561491), general investigation and background-check services that aren't consumer reporting (561611), and computing infrastructure and data processing (518210).[1] Credit-scoring and decisioning software, financial-data terminals, and marketing data brokers sit in software and information codes, not here — which is why FICO's revenue is not counted in this industry's federal statistics even though FICO is the most valuable "credit" company of all. Bond and securities rating agencies (Moody's, S&P Global Ratings, Fitch), which grade debt securities rather than people, are a distinct activity often grouped with bureaus in trade data but built on a different business model.

Ownership mix. The consumer-credit tier is effectively a three-firm oligopoly. Equifax and TransUnion are U.S.-listed; Experian is UK/Ireland-domiciled and London-listed. Dun & Bradstreet was taken private in 2025.[11] The specialty tier is overwhelmingly private — independent firms, private-equity portfolio companies, or subsidiaries of larger data groups.

---

3. How big it is

Federal statistics for NAICS 561450 (the ground-truth Census/SBA figures):

The concentration numbers tell the story. The four largest firms take three-quarters of revenue, the top twenty take essentially all of it, and the HHI of about 1,560 places the industry in the "moderately concentrated" band by U.S. antitrust guidelines — and that understates reality for consumer credit specifically, where three firms dominate. The typical firm is tiny (222 firms, 408 establishments, ~26,000 employees in total), so the average is dwarfed by a few giants. Note the figures are not perfectly comparable across years: receipts and concentration are 2022 (Economic Census), while establishments, employment, and payroll are 2023 (County Business Patterns).

A scope caveat that matters. The $14.67 billion federal receipts figure captures only activity classified as U.S. credit-bureau work. The companies popularly called "credit bureaus" are far larger than that: much of their revenue is analytics, fraud and identity products, marketing services, and international operations that fall in other NAICS codes — and FICO's scoring revenue is excluded entirely. County Business Patterns also counts only employer establishments with paid staff, and a diversified company may book an establishment under a different primary activity. So the federal number is an accurate measure of the narrow industry but a poor measure of the economic weight of the firms. This is the reverse of industries governments undercount because they are full of tiny or informal operators; here the count is clean, but the leading companies simply do most of their business outside the code's boundary.

---

4. The investable universe

Public pure-plays are few. The table below shows the companies most investors mean when they say "credit bureau," with rough scale. Tickers and valuations appear only here and in Section 10.

These listed companies are diversified global information businesses, not pure-play representations of NAICS 561450. Bureau credit-file revenue is one part of a broader portfolio that also spans workforce, marketing, software, international, and identity lines.

Major private or non-pure-play owners:

• Dun & Bradstreet — taken private by Clearlake Capital in August 2025 for $7.7 billion including debt ($9.15 per share); no longer trades.[11]
• LexisNexis Risk Solutions — a large specialty CRA and analytics provider, owned by RELX (London/Amsterdam/New York-listed) rather than sold as a standalone; a public but non-pure-play route.[12]
• Innovis — the smaller "fourth" nationwide consumer bureau, a subsidiary of privately held CBC Companies.[2]
• Cotality (formerly CoreLogic) — property, mortgage, and specialty data; taken private by Stone Point Capital and Insight Partners in 2021.[13]
• MicroBilt — privately held consumer and commercial risk-information provider serving lending, leasing, collections, screening, and business-credit customers.[2]
• Specialty units inside the big three — e.g., DataX (subprime/alternative-finance data, owned by Equifax) and Clarity Services (alternative financial-services data, owned by Experian); no separate public exposure.[2]

Bottom line: outside the listed names there is essentially no way to buy a "credit bureau" on a public exchange, and even Equifax, TransUnion, and Experian are diversified data companies whose credit-file business is one part of a broader analytics portfolio.

---

5. How the money works

The economics are unusual and worth understanding, because they explain the margins.

The data is free; reading it is not. Lenders furnish borrower data to the bureaus at no charge, under a reciprocity system: to pull reports you must contribute data. That means the bureaus' central asset is built and maintained by their own customers — a contributory data model. A new entrant cannot buy or replicate a nationwide, decades-deep, continuously updated file; this is the industry's moat.

Revenue is transactional and volume-driven. Bureaus charge per report pulled, per score delivered, and per batch of accounts screened. Every mortgage application, card origination, auto loan, and periodic account review generates a billable pull. Layered on top are subscriptions (analytics, fraud/identity, and direct-to-consumer credit monitoring) that smooth the transactional swings. TransUnion describes its model as recurring, diversified, low in capital intensity, and supported by operating leverage.[8]

Incremental margins are very high. Because the data is already collected, each additional report costs almost nothing to produce. The listed bureaus run adjusted-EBITDA (earnings before interest, taxes, depreciation, and amortization) margins in the mid-30s to low-40s percent range, and FICO's Scores segment — a per-score royalty with essentially no marginal cost — runs operating margins around 90%.[9][10]

The metrics investors actually watch:

• Organic revenue growth and the mortgage vs. non-mortgage mix — mortgage is the most volatile input, so a lower mortgage share means steadier revenue.
• EBITDA margin and its trend; cash conversion and technology spend.
• Unit pricing. Pricing power is a central part of the story: FICO's wholesale mortgage-score royalty rose from roughly $0.60 to $4.95 per score over about three years to 2025, and drove most of FICO's Scores growth even as mortgage volumes fell.[9][22]
• Volumes / inquiries, which track the lending cycle.
• New records and new products (alternative data, cash-flow and income data, fraud/identity) that expand what each customer relationship is worth.

The right operating analogue is a data network with transaction-sensitive demand and high fixed technology, compliance, and integration costs — not a manufacturer's capacity utilization or a retailer's same-store sales. Owners make money by owning an irreplaceable data asset, charging a small toll on every credit decision, and raising the toll faster than volumes decline in downturns.

---

6. What drives demand

• Lending volume, above all. Reports and scores are pulled when credit is granted, so demand rises and falls with mortgage, auto, card, and personal-loan originations — which in turn track interest rates and the credit cycle. Mortgage is the swing factor; a rate-driven origination slump hits bureau volumes hard, as 2022-2024 showed.
• Commercial and supplier credit. Business-to-business credit decisions and trade-credit checks (Dun & Bradstreet's core) add a separate, less consumer-cyclical demand pool.
• Employment and income verification. Verifying a borrower's or applicant's income and job (Equifax's The Work Number is the leader) feeds mortgage underwriting, background checks, and government-benefit eligibility, and grows somewhat independently of the credit cycle.
• Fraud and identity. Rising digital commerce and fraud have made identity verification, account-takeover defense, and synthetic-identity detection one of the fastest-growing demand pools.
• Insurance underwriting. Claims-history and risk analytics feed insurance pricing and underwriting.
• Consumer self-monitoring. Direct-to-consumer credit monitoring and identity-protection subscriptions — a market the bureaus' own breaches helped create — provide recurring revenue.
• New data and new mandates. Alternative data (rent, utilities, cash flow, buy-now-pay-later) expands the population that can be scored. Decisions by mortgage giants Fannie Mae and Freddie Mac about which scores and data to require can shift demand overnight (see Section 8).

Forward-looking judgment: long-term demand should stay favorable because more commerce, lending, and fraud prevention are moving online, but near-term growth will be uneven because bureau revenue is tied to credit applications, housing activity, interest rates, and consumer confidence.

---

7. Regulation

Credit bureaus are among the most heavily regulated data businesses in the country.

• Fair Credit Reporting Act (FCRA, 1970) — the foundational law. It governs accuracy, requires bureaus to investigate consumer disputes, limits who may pull a report to those with a "permissible purpose," requires "adverse action" notices when a report is used to deny credit (or insurance, employment, or housing), and gives consumers the right to see their files. Specialty reporting companies fall under the FCRA even when they do not market themselves as traditional bureaus.[14]
• Fair and Accurate Credit Transactions Act (FACTA, 2003) — added free annual credit reports (via AnnualCreditReport.com, now available weekly), fraud alerts, and security freezes.
• Regulation V — the CFPB's rule implementing the FCRA.
• Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule — impose privacy and data-security obligations on covered financial institutions and their service providers. State privacy, breach-notification, biometric, and employment-screening laws add further requirements.[15]
• Supervisors. The Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC) share oversight and enforcement. The CFPB directly supervises "larger participants" in consumer reporting; the current threshold is $7 million in annual receipts from reporting activity, though in 2025 the Bureau proposed raising it toward the $41 million small-business size standard, which would shrink the number of firms it examines.[16][5]

The regulatory pendulum swung toward deregulation in 2025 — a live theme for investors:

• A CFPB rule to strip roughly $49 billion of medical debt from the credit reports of about 15 million consumers was finalized in January 2025, then vacated by a federal court in July 2025 as exceeding the agency's authority; the CFPB later issued an interpretive rule that the FCRA preempts conflicting state medical-debt laws.[17]
• A proposed rule to bring data brokers under the FCRA was withdrawn in May 2025.[18]

The cautionary tale. In 2017 Equifax suffered a breach exposing the personal data of about 147 million people; it agreed in 2019 to a settlement of at least $575 million (up to $700 million) with the FTC, CFPB, and states.[19] For investors, regulation cuts both ways: strong compliance, data lineage, model governance, dispute handling, and cybersecurity protect incumbents, while failures produce investigations, remediation costs, litigation, and lost trust. Data security is not a side issue here — it is existential.

---

8. Competitive dynamics and consolidation

A stable oligopoly with shifting internal balance. The three consumer bureaus rarely compete on the core file — a lender needs all three for a full mortgage picture — so they compete on analytics, fraud, verification, and international expansion. Barriers to entry (the data-reciprocity network, identity-resolution capability, permissible-purpose credentialing, FCRA compliance, and scale) are close to insurmountable, which is why the roster has barely changed in decades. TransUnion names Equifax, Experian, LexisNexis, Fair Isaac, Verisk, marketing-data providers, identity-protection companies, and niche specialists as its competitors, competing on data assets, analytics, integration, reliability, relationships, innovation, and price.[8]

The scoring tug-of-war. The most important competitive story is between FICO and VantageScore, the rival score jointly owned by the three bureaus. Two 2025 events reshaped it:

• In July 2025 the Federal Housing Finance Agency (FHFA) allowed lenders to use VantageScore 4.0 — not just Classic FICO — on mortgages sold to Fannie Mae and Freddie Mac, opening real competition in the mortgage-score franchise for the first time and, proponents say, scoring tens of millions more thin-file consumers.[20]
• In October 2025 FICO said it would license scores directly to mortgage resellers, partly bypassing the bureaus' distribution; bureau shares fell on the news, which investors read as a threat to the fee the bureaus earn for delivering scores.[21]

Consolidation. Growth increasingly comes from buying specialty data and analytics firms — the bureaus have rolled up fraud, identity, marketing, and alternative-data businesses over the past decade. The headline 2025 deal was private equity's, not a bureau's: Clearlake Capital took Dun & Bradstreet private for $7.7 billion, a sign that even large, mature data assets are attractive to buyers who can operate them out of the public eye.[11] The risk in any roll-up is that integration complexity, regulatory scrutiny, and customer resistance limit the expected synergies.

---

9. Risks

• Cyclicality. Volumes are tied to lending, and mortgage especially. A rate-driven origination downturn compresses revenue quickly; pricing increases can offset it for a while but not forever.[8]
• Cybersecurity. A serious breach carries reputational, legal, and regulatory damage — the 2017 Equifax episode remains the reference case.[19]
• Regulatory and political risk in both directions. Pro-consumer rules can remove profitable data (the medical-debt fight); deregulation can ease compliance but also invite new competition. The current posture is lighter-touch, but that can reverse with an administration.[17][18]
• Accuracy and dispute liability. Incorrect data harms consumers and triggers FCRA lawsuits — the industry faces a steady stream of accuracy and dispute litigation.[14]
• Disintermediation and free-data competition. FICO's move to reach resellers directly, and the rise of open-banking and cash-flow underwriting that lets lenders assess borrowers without a traditional report, threaten the toll-booth position; banks, fintechs, and personal-finance sites increasingly offer low-cost credit information.[21]
• Customer concentration and pricing pressure. Large lenders and platforms can renegotiate, dual-source, insource, or use their buying power to push prices down.
• Data-input erosion. The model depends on lenders continuing to furnish data and on tradelines (like medical debt) remaining on file. Anything that thins the file thins the product.
• Concentration and antitrust scrutiny. A tri-opoly on sensitive consumer data is a permanent target for regulators and litigants.
• Private-equity leverage. Sponsor-owned platforms (e.g., Dun & Bradstreet) may carry more debt and face refinancing or exit-market pressure through a downturn.

---

10. How to invest and the outlook

Public routes.

• U.S.-listed: Equifax (NYSE: EFX) and TransUnion (NYSE: TRU) for the bureaus; Fair Isaac (NYSE: FICO) for the scoring franchise. As of mid-2026 the rough market values were about $20 billion for Equifax, $15 billion for TransUnion, and $29-30 billion for FICO — the last down sharply from roughly $48 billion in early 2025 as VantageScore competition and the reseller pivot rattled sentiment.[23] These are growth-and-quality names, not income plays: Equifax and TransUnion pay small dividends (yields under ~1.2%), and FICO pays none, returning cash mainly through buybacks.[23]
• Non-U.S.-listed: Experian trades in London (LSE: EXPN) as a FTSE 100 constituent, with a U.S. over-the-counter ADR (EXPGY) for those who want dollar access. Its fiscal-2026 revenue was about $8.4 billion, making it the largest of the group by top line, with North America its biggest market.[7]
• Indirect: LexisNexis Risk Solutions exposure comes via RELX;[12] there is no clean way to buy the specialty-CRA tier on public markets.

When sizing any of these names, separate bureau credit-file revenue from adjacent workforce, marketing, software, international, and identity businesses, and adjust for geographic exposure, leverage, currency, and capital-allocation policy. Share price, dividend yield, and valuation multiples belong in that company-specific analysis, not in the industry statistics.

Private routes. Direct private ownership of a nationwide credit bureau is largely closed — the assets are either public or held by large sponsors. The realistic private-side plays are (a) private-equity vehicles that own data assets, as with Clearlake/Dun & Bradstreet or Stone Point/Cotality, and (b) venture investment in the fintechs building the alternative to traditional reports — cash-flow, income, and open-banking underwriting — which is where disruption capital is flowing.[11][13] Key diligence questions: Who owns and supplies the data, and is it exclusive, contributory, or easily replicated? How much revenue is recurring versus transactional? How concentrated are customers and furnishers? What is the dispute, breach, and regulatory history? Is the leverage supportable through a lending downturn?

Near-term drivers to watch (forward-looking):

• The mortgage cycle. A recovery in originations from the 2022-2024 trough would lift bureau volumes across the board; continued weakness keeps the group dependent on price increases to grow.
• Score competition. How quickly lenders actually adopt VantageScore 4.0 on government-sponsored-enterprise (GSE) mortgages, and how FICO's direct-to-reseller model plays out, will reallocate profit among FICO, the bureaus, and VantageScore.[20][21]
• Pricing power vs. scrutiny. FICO's aggressive per-score increases have been the profit engine; whether they persist — and whether they draw political or regulatory pushback — is a swing factor.[22]
• AI-driven products and fraud/identity demand, which the companies are positioning as their next growth leg beyond the cyclical core.
• The regulatory setting, currently deregulatory, but capable of reversing and repricing the group either way.[17][18]

The through-line: these are toll-booth businesses on the credit economy — durable, high-margin, and defensible — but priced accordingly, exposed to the mortgage cycle, and, for the first time in years, facing genuine competition over the score that sits at the center of the whole system.

---

Sources

1. U.S. Census Bureau, 2022 NAICS Manual / NAICS 561450 — Credit Bureaus (definition), 2022. https://www.census.gov/naics/?input=561450&year=2022
2. Consumer Financial Protection Bureau, List of Consumer Reporting Companies, 2024-2025. https://files.consumerfinance.gov/f/documents/cfpb_consumer-reporting-companies-list.pdf
3. U.S. Census Bureau, 2022 Economic Census — Concentration of Largest Firms, NAICS 561450 (receipts, firms, CR4/CR8/CR20/CR50, HHI). https://data.census.gov/table/ECNSIZE2022.EC2200SIZECONCEN
4. U.S. Census Bureau, County Business Patterns, NAICS 561450 (establishments, employment, annual and Q1 payroll), 2023. https://data.census.gov/table/CBP2023.CB2300CBP
5. U.S. Small Business Administration, Table of Small Business Size Standards, NAICS 561450 ($41 million), 2023. https://www.sba.gov/document/support-table-size-standards
6. Equifax Inc., Full-Year 2024 Results (Form 8-K / earnings release), 2025. https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000033185&type=8-K
7. Experian plc, Full-Year Results FY26 (year ended 31 March 2026), 2026. https://www.experianplc.com/newsroom/press-releases/2026/full-year-results-fy26
8. TransUnion, Fourth Quarter and Full-Year 2024 Results / 2025 Annual Report. https://www.globenewswire.com/news-release/2025/02/13/3025706/0/en/TransUnion-Announces-Fourth-Quarter-and-Full-Year-2024-Results-and-Refreshed-Capital-Allocation-Framework.html
9. Fair Isaac Corporation, Form 10-K, Fiscal 2024 (Scores segment revenue), 2024. https://www.sec.gov/Archives/edgar/data/814547/000162828024045719/fico-20240930.htm
10. Fair Isaac Corporation, Form 10-K, Fiscal 2025 (Scores segment revenue), 2025. https://www.sec.gov/Archives/edgar/data/814547/000081454725000030/fico-20250930.htm
11. Dun & Bradstreet Holdings / Clearlake Capital, Acquisition completion (Form 8-K / press release), 2025. https://www.sec.gov/Archives/edgar/data/1799208/000110465925082892/tm2524330d1_ex99-1.htm
12. RELX, Annual Report 2025 (LexisNexis Risk Solutions), 2026. https://www.relx.com/investors/annual-reports
13. Stone Point Capital / Insight Partners, CoreLogic (now Cotality) Acquisition, 2021. https://www.stonepoint.com/news/corelogic-enters-into-definitive-agreement-to-be-acquired-by-stone-point-capital-and-insight-partners-for-80-per-share-in-cash/
14. Federal Trade Commission, Fair Credit Reporting Act. https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act
15. Federal Trade Commission, Gramm-Leach-Bliley Act / Safeguards Rule. https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act
16. Consumer Financial Protection Bureau / Federal Register, Defining Larger Participants of the Consumer Reporting Market, 2025. https://www.federalregister.gov/documents/2025/08/08/2025-15088/defining-larger-participants-of-the-consumer-reporting-market
17. Federal Register, Prohibition on Creditors and Consumer Reporting Agencies Concerning Medical Information (Regulation V), Jan. 2025; and reporting on the July 2025 court vacatur. https://www.federalregister.gov/documents/2025/01/14/2024-30824/prohibition-on-creditors-and-consumer-reporting-agencies-concerning-medical-information-regulation-v
18. Federal Register, Protecting Americans From Harmful Data Broker Practices (Regulation V); Withdrawal of Proposed Rule, May 2025. https://www.federalregister.gov/documents/2025/05/15/2025-08644/protecting-americans-from-harmful-data-broker-practices-regulation-v-withdrawal-of-proposed-rule
19. Federal Trade Commission, Equifax to Pay $575 Million as Part of Settlement Related to 2017 Data Breach, 2019. https://www.ftc.gov/news-events/news/press-releases/2019/07/equifax-pay-575-million-part-settlement-ftc-cfpb-states-related-2017-data-breach
20. VantageScore / Federal Housing Finance Agency, VantageScore 4.0 Allowed for Use on All Fannie Mae and Freddie Mac Mortgages, 2025. https://www.prnewswire.com/news-releases/vantagescore-4-0-allowed-for-use-on-all-fannie-mae-and-freddie-mac-mortgages-effective-immediately-302500383.html
21. CNBC, FICO provider is shaking up its credit score business; its stock is surging, 2025. https://www.cnbc.com/2025/10/02/fico-provider-is-shaking-up-its-credit-score-business-its-stock-is-surging.html
22. HousingWire, Prices for FICO scores predicted to rise again in 2025, 2024. https://www.housingwire.com/articles/mortgage-credit-score-prices-predicted-to-rise-2025/
23. Company market-capitalization and dividend data (EFX, TRU, FICO), StockAnalysis / CompaniesMarketCap / TransUnion investor releases, 2025-2026. https://stockanalysis.com/stocks/fico/; https://stockanalysis.com/stocks/efx/; https://newsroom.transunion.com/