AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

EQUIFAX INC.

bd_dda0ff4be12a0729 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 15, 2015

Filed

Apr 2, 2015

To disclose

18 days

Affected

1state residents only

Linked

2 filings

Confidence

68%

Full breach record for EQUIFAX INC. →12 incidents on file

Equifax notified the New Hampshire Attorney General on April 2, 2015, of a data incident affecting one NH resident. On March 15, 2015, Equifax discovered a technical error during a software change that resulted in the inadvertent mailing of one resident's PII (including SSN and account numbers) to incorrect individuals. Equifax addressed the error, attempted to retrieve the data, and offered one year of ID Patrol protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Mar 15, 2015

Discovered

Apr 2, 2015

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_c23ad9cbbf1cb7762015-04-08 · +6dVerified

Name: EQUIFAX INC.
norm: equifax
Domain: equifax.com

Name: EQUIFAX INC.
norm: equifax
Domain: equifax.com
Industry: Financial Servicesllm

Discovered: Mar 15, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Misconfiguration
Regulator citations: Alerted the state Attorney General of each state where individuals who inadvertently received personally identifiable information of others reside

During the incident: Addressed the technical error
Attempted to call each of the individuals who received the personally identifiable information of the affected New Hampshire resident in an effort to retrieve the inadvertently mailed information
Alerted the state Attorney General of each state where individuals who inadvertently received personally identifiable information of others reside
Offering a free one-year subscription to Equifax ID Patrol identity theft protection product
Changes made: Addressed the technical error
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 2 · first · this page

Massachusetts State AG+6d

Pattern: first filing Apr 2 (NH), last Apr 8 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/equifax-20150402.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2015
Raw hash: 45ca1bead6345f9a28d69e835f8d5a1e726ee4330ea8a3af1348349d0fe43441

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEQUIFAX INC.

Victim entityEQUIFAX INC.

Incidentdiscovered Mar 15, 2015

Stated responseAddressed the technical error

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov