HackingFinancial ServicesTechnologyFinanceVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountCriticalActive

EQUIFAX INC.

bd_c7a263041aff3805 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 29, 2017

Filed

Sep 7, 2017

To disclose

6 weeks

Affected · nationwide

143,000,000622,558 in this filing

Linked

7 filings

Confidence

66%

Full breach record for EQUIFAX INC. →12 incidents on file

Equifax Inc. notified New Hampshire AG of a cybersecurity incident discovered July 29, 2017, where criminals exploited a web application vulnerability to access files. Approximately 143 million U.S. consumers affected, including 622,558 NH residents. Data included names, SSNs, DOBs, addresses, driver's licenses, and some credit card numbers. Equifax engaged forensic investigators, notified law enforcement, and offered one year of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Jul 29, 2017

Discovered

Sep 7, 2017

Filed

vs. sector median

3 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_278155640602f8682017-09-07Verified
Washington State AGbd_958fcf9ef068490f2017-09-07Candidate
Oregon State AGbd_d60b910cf11a2f9c2017-09-07Verified
Massachusetts State AGbd_e7e140ebd326c5762017-09-07Verified

Show 2 more filings ↓up to 35d gap

South Carolina State AGbd_20e4e8963ad56aa02017-09-12 · +5dVerified
New Hampshire State AGbd_bf00e329b87159ef2017-10-12 · +35dVerified

Name: EQUIFAX INC.
norm: equifax
Domain: equifax.com

Name: EQUIFAX INC.
norm: equifax
Domain: equifax.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Jul 29, 2017
Materiality determined: —
Notification sent: Sep 7, 2017
Affected individuals: 143,000,000state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Reported the criminal access to law enforcement
Initial access: exploit_public_facing

During the incident: Engaged a leading, independent cybersecurity firm that has been conducting a comprehensive forensic review
Reported the criminal access to law enforcement
Established a dedicated website, www.equifaxsecurity2017.com
Sent direct mail notices to consumers whose credit card numbers or dispute documents with personal identifying information were impacted
Offered complimentary credit file monitoring and identity theft protection for one year
Established a dedicated call center, [REDACTED-PHONE]
Changes made: Offered complimentary credit file monitoring and identity theft protection for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

California State AGSep 7 · first

Washington State AGSep 7 · first

Oregon State AGSep 7 · first

Massachusetts State AGSep 7 · first

New Hampshire State AGSep 7 · first · this page

South Carolina State AG+5d

New Hampshire State AG+35d

Pattern: first filing Sep 7 (CA), last Oct 12 (NH) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/equifax-20170907.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2017
Raw hash: 41e1ea6fdbf4ccd74a892adfa895f4a4a8f9bcdc8c13fb16a9426fbd46a35ce5

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityEQUIFAX INC.

Victim entityEQUIFAX INC.

Incidentdiscovered Jul 29, 2017

Stated responseEngaged a leading, independent cybersecurity firm that has been conducting a comprehensive forensic review

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov