At least one positive thing could come from the last year's massive Equifax data breach: The fees that consumers shell out to protect their credit reports could be going by the wayside. A provision included in a Senate bill that's headed for likely passage in the next few days would require credit-reporting firms to let U.S. consumers put a freeze on their credit reports without paying for it. Freezing your credit report generally blocks outside access to your file. This means a scammer can't get a loan or establish credit using your personal information because the potential lender is unable to check your report and typically will reject the application.

Credit reporting company Equifax Inc. corporate offices are pictured in Atlanta, Georgia. Tami Chappell | Reuters

At last count — the total was revised upward by 2.4 million last week — as many as 147.9 million consumers were affected by the cyberattack at Equifax, which was revealed last September. The personal information compromised in the breach include names, birth dates, Social Security numbers, addresses and some driver's license numbers. The congressional effort to require free freezes is part of a larger measure, S. 2155, which rolls back some banking regulations put in place after the financial crisis that rocked the U.S. economy a decade ago. While consumer advocates have long sought free credit freezes, they are opposed to this provision being part of a bill that eases regulatory requirements and oversight of banks and mortgage lenders. "I think free freezes are good, but not when it's part of a bill with other things that puts consumers and the economy at risk," said Mike Litt, consumer campaign director at consumer advocacy group U.S. PIRG. Supporters of the bill, however, say it will make it easier for consumers to access loans and will encourage economic growth. Litt also said that by imposing a national standard for credit freezes, it prevents states from taking additional steps to give consumers better control of their own credit reports. Additionally, the provision does not require passwords or PINs — only identifying information — when a freeze is lifted, which Litt said could make it easier for criminals to access your credit report.

As it stands now, only a few states require credit freezes to be free. U.S. PIRG estimated last year that consumers collectively would face a $4.1 billion tab to freeze their credit reports at the three largest firms: Equifax, Experian and TransUnion. In states where fees are legal, consumers can pay anywhere from $2 to $10 per freeze. Additionally, some states currently allow credit reporting firms to charge a fee for a temporary removal of your freeze when you want a lender to check your credit report so you can get a loan.(Some states waive these fees for certain consumers, such as seniors or active-duty military members.)