| − | In July 2017, hackers accessed the Equifax records of 143 million consumers. Among these are a many people who have never dealt directly with Equifax, both within the U.S. and abroad.<ref>https://www.nbcnews.com/tech/security/massive-equifax-data-breach-could-impact-half-u-s-population-n799686 Retrieved Sept. 9, 2017</ref> The attackers gained access using a known vulnerability in Apache Struts (CVE-2017-5638). A patch for the issues had been available since march 2017, but not used by Equifax. | + | In July 2017, hackers accessed the Equifax records of 143 million consumers. Among these are many people who have never dealt directly with Equifax, both within the U.S. and abroad.<ref>https://www.nbcnews.com/tech/security/massive-equifax-data-breach-could-impact-half-u-s-population-n799686 Retrieved Sept. 9, 2017</ref> The attackers gained access using a known vulnerability (CVE-2017-5638) in Apache Struts.<ref>investor.equifax.com/news-and-events/news/2017/09-15-2017-224018832</ref> A patch for the issue had been available since March 2017, but not used by Equifax.<ref>https://nvd.nist.gov/vuln/detail/CVE-2017-5638</ref> |