Equifax timeline on breach detailed but unclear

Andrew Cummings
September 19, 2017

While Equifax's systems outside of the United States were not affected by the recent hack that exposed the personal and financial details of 143 million American consumers, Equifax UK has now revealed that 400,000 people in the UK have had some of their personal details disclosed due to a "process failure". The company did say on Friday that the Chief Information Officer and Chief Security Officer would both be leaving the organization.

The credit monitoring firm said the investigation into the data breach is ongoing and it's working with the Financial Conduct Authority and the Information Commissioner's Office to get to the bottom of it.

The DFS superintendent will have the authority to deny or revoke an agency's authorization to do business with NY consumers and state-regulated financial institutions if a firm fails to comply with regulations, the governor said.

Earlier this month, Equifax announced a breach impacting 143 million people. The Equifax breach is another painful example teaching us that cyber resilience begins and ends with the board and senior executives. Similarly the need for a universally accepted measure of the enterprise value of data is made all the more urgent due to this breach.

The information was restricted to: name, date of birth, email address and a telephone number.

"The Equifax breach was a wakeup call", Cuomo said in the statement, "and with this action, NY is raising the bar for consumer protections that we hope will be replicated across the nation".

Equifax also said Friday it would continue to allow people to place credit freezes on their reports without a fee through November 21.

"Members of the public should remain vigilant of any unsolicited emails, texts or calls, even if it appears to be from a company they are familiar with", the regulator warned the public.

"What we know today is that there was a fix available out there, but they didn't put the patch in", Healey said.

You can unfreeze your account at any time or temporarily lift the freeze.

If you've ever gotten a credit check before, there's a pretty high chance that your information was stolen.

As of our deadline, Equifax has not responded to a letter from the attorneys general.

"I'm here to sue Equifax for their wrongdoing to millions of Americans", he said. According to Michael Kaiser, executive director of the National Cyber Security Alliance, "Everyone should assume that their data may have been lost in this breach". The Fair Credit Reporting Act requires the three main credit agencies to provide you with a free copy of your credit report once per year.

The House Energy and Commerce Committee has scheduled an Oct 3 hearing with Equifax chief executive Richard Smith, who has openly apologized.

Other reports by iNewsToday