Cecily Zamora
In 2017, Equifax suffered a data breach that compromised the personal information of 143 million Americans. The company failed to safeguard the names, addresses, dates of birth and SSNs of its customers, and then failed to act once aware of the breach. The breach exposed millions of people to the risk of identity theft and fraud. The US government has since indicted four members of China's military on charges of hacking Equifax. In the wake of the breach, there have been calls for stronger data privacy laws and for federal agencies to take action against Equifax.
| Characteristics | Values |
|---|---|
| Number of people affected | 143 million (some sources state 147 million or 150 million) |
| Type of data compromised | Names, addresses, dates of birth, SSNs |
| Action taken by Equifax | Failed to act once aware of the breach |
| Action taken by federal agencies | None |
| Action taken by the U.S. government | Indicted four members of China's military on charges of hacking Equifax |
| Settlement | Equifax agreed to pay at least $575 million, and potentially up to $700 million |
Explore related products
What You'll Learn
Equifax failed to safeguard personal data
The 2017 data breach was one of the largest in US history, compromising the personal data of 143 million Americans. Equifax has agreed to pay at least $575 million, and potentially up to $700 million, as part of a global settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau (CFPB), and 50 U.S. states and territories.
The U.S. government has also indicted four members of China's military on charges of hacking Equifax to exploit the personal data of 150 million Americans. They allegedly conspired to hack into Equifax's computer networks, maintain unauthorized access to those computers, and steal sensitive, personally identifiable information of nearly half of all American citizens.
The failure of Equifax to safeguard personal data has had significant implications for the privacy and security of Americans, highlighting the need for stronger data protection measures and enforcement of existing laws.
Who Breaks the Law? Political Party and Crime
You may want to see also
Explore related products
Equifax failed to act once aware of the breach
The breach was caused by a failure to take reasonable steps to secure its network. Equifax's network was hacked by four members of China's military who conspired to hack into Equifax's computer networks, maintain unauthorized access to those computers, and steal sensitive, personally identifiable information of nearly half of all American citizens. This placed American consumers at risk from foreign adversaries.
Despite the severity of the breach, no federal agency has taken action against Equifax. The company has, however, agreed to pay at least $575 million, and potentially up to $700 million, as part of a global settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau (CFPB), and 50 U.S. states and territories. This settlement arose from the 2017 data breach that compromised personal data.
In the aftermath of the breach, EPIC President Marc Rotenberg testified before the House and the Senate about the Equifax breach. Rotenberg warned lawmakers and regulators that "the Equifax data breach is one of the most serious in the nation's history." He urged lawmakers to update federal privacy laws and also ensure that the CFPB pursues an effective investigation. Rep. Luetkemeyer (R-MO) has introduced a bill that would codify basic data breach notification standards for the financial services industry but would preempt stronger state laws.
Elizabeth Warren's Legal Troubles: What Laws Were Broken?
You may want to see also
Explore related products
![Compliance [Blu-ray]](https://m.media-amazon.com/images/I/712fZO6aOlL._AC_UY218_.jpg)
Equifax failed to secure its network
The breach was caused by Equifax's failure to take reasonable steps to secure its network. This included not implementing proper security measures, such as encryption and two-factor authentication, to protect the personal information stored on its network. As a result, hackers were able to gain unauthorised access to Equifax's computer networks and steal sensitive, personally identifiable information.
The company also failed to act once it became aware of the breach, which further compromised the personal data of its customers. This inaction led to criticism from EPIC President Marc Rotenberg, who testified before the House in 2018 and the Senate in 2017 about the Equifax breach. He warned lawmakers and regulators that "the Equifax data breach is one of the most serious in the nation's history" and urged them to update federal privacy laws and ensure an effective investigation by the CFPB.
The failure of Equifax to secure its network had far-reaching consequences, with the personal data of nearly half of all American citizens at risk. This highlighted the need for stronger data protection laws and enforcement to prevent similar incidents from occurring in the future.
Martial Law Violation: Understanding the Unthinkable Consequences
You may want to see also
Explore related products
$29.99
Equifax exposed millions of names and addresses
The breach was caused by Equifax's failure to take reasonable steps to secure its network, leading to a breach that exposed millions of names and other personal information. This information could be used for identity theft and fraud. In addition to the financial settlement, Equifax also faced criticism and calls for updated federal privacy laws to prevent similar incidents from occurring in the future.
The US government has also indicted four members of China's military on charges of hacking Equifax to exploit the personal data of 150 million Americans. They allegedly conspired to hack into Equifax's computer networks, maintain unauthorized access, and steal sensitive, personally identifiable information.
While federal laws did not adapt specifically in response to the Equifax breach, state laws did change. New York added strict cybersecurity controls for credit bureaus operating in the state, and the European Union implemented its General Data Protection Regulation.
Sam Bankman-Fried: Lawbreaker or Misguided Crypto Maverick?
You may want to see also
Explore related products
![Law of Governance, Risk Management and Compliance: [Connected Ebook] (Aspen Casebook)](https://m.media-amazon.com/images/I/616gNHR5shL._AC_UY218_.jpg)
Equifax exposed other personal information that could lead to identity theft and fraud
The 2017 data breach is one of the most serious in US history, compromising the authenticating details of over 100 million Americans. Equifax has agreed to pay at least $575 million, and potentially up to $700 million, as part of a global settlement with the FTC, the Consumer Financial Protection Bureau (CFPB), and 50 US states and territories.
The US government has also indicted four members of China's military on charges of hacking Equifax to exploit the personal data of 150 million Americans. They allegedly conspired to hack into Equifax's computer networks, maintain unauthorized access to those computers, and steal sensitive, personally identifiable information of nearly half of all American citizens.
The failure of Equifax to safeguard the personal data of Americans has placed American consumers at risk from foreign adversaries. The company's authentication services were clearly inadequate, and its failure to act once aware of the breach is a serious concern. The settlement with Equifax is a step towards holding the company accountable for its negligence and ensuring that such a breach does not occur again.
Discrimination: Walking the Fine Line Without Breaking the Law
You may want to see also
Frequently asked questions
Equifax broke federal privacy laws.
The company agreed to pay at least $575 million, and potentially up to $700 million, as part of a global settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau (CFPB), and 50 U.S. states and territories.
The personal information of 147 million people, including names, addresses, dates of birth, and SSNs.
