EQUIFAX INC.

Equifax Inc. filed a supplemental California SB-24 breach notification regarding a 2017 cybersecurity incident. Criminals exploited a website application vulnerability to access data from mid-May to July 2017. The breach impacted approximately 143 million U.S. consumers initially, with an additional 2.5 million consumers identified later, and a further 2.4 million consumers identified in March 2018 whose partial driver's license information was stolen. Data types included names, driver's license numbers, dates of birth, and Social Security numbers. Equifax engaged forensic investigators, notified law enforcement, and offered credit monitoring services.