HackingFinancial ServicesTechnologyFinanceVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDCriticalContained

Equifax Inc.

bd_7d1fe6fa92124887 · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

Mar 1, 2018

To disclose

—

Affected · nationwide

2,400,0005 in this filing

Linked

3 filings

Confidence

67%

Equifax supplemental notice regarding 2017 cyberattack. Identified 2.4M additional U.S. consumers whose names and partial driver's license info were stolen. Incident involved unauthorized access and data exfiltration. Response included external forensic analysis, Lock & Alert service, and credit monitoring offers.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 1, 2018

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_e5bbb6657fc0affc2018-03-01Verified
Massachusetts State AGbd_fc0729afce3900e32018-03-02 · +1dVerified

Name: Equifax Inc.
norm: equifax

Name: Equifax Inc.
norm: equifax
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 2,400,000state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Engaged resources of an external data provider
Launched Lock & Alert to all U.S. consumers
Established a web portal advising U.S. consumers to review their account statements and credit reports
Offered free identity theft protection and credit file monitoring services to all U.S. consumers
Changes made: Offered identity theft protection and credit file monitoring services at no cost to newly identified consumers
Launched Lock & Alert service to enable consumers to quickly lock and unlock their Equifax credit report
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Montana State AGMar 1 · first

Montana State AGMar 1 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Equifax-update-March-1-2018.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 1, 2018
Raw hash: 94baded649ff600996df89355a7479fdfd59320da0c361920f2d714bebd3348e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEquifax Inc.

Victim entityEquifax Inc.

IncidentUnauthorized Access

Stated responseEngaged resources of an external data provider

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov