Difference between revisions of "Equifax"
(specific vulnerability and breach details) |
m (→Data breach: formatting) |
||
| Line 4: | Line 4: | ||
==Data breach== | ==Data breach== | ||
| − | In July 2017, hackers accessed the Equifax records of 143 million consumers. Among these are a many people who have never dealt directly with Equifax, | + | In July 2017, hackers accessed the Equifax records of 143 million consumers. Among these are a many people who have never dealt directly with Equifax, both within the U.S. and abroad.<ref>https://www.nbcnews.com/tech/security/massive-equifax-data-breach-could-impact-half-u-s-population-n799686 Retrieved Sept. 9, 2017</ref> The attackers gained access using a known vulnerability in Apache Struts (CVE-2017-5638). A patch for the issues had been available since march 2017, but not used by Equifax. |
| − | |||
==References== | ==References== | ||
Revision as of 07:11, September 17, 2017
Equifax is a private credit reporting company. The company trades information with credit card companies and banks in order to evaluate how much of a credit risk each individual consumer represents. Equifax business model is to charge companies when it prepares a credit report on an individual and to rent out lists of consumers to people seeking to market products and services.
There are two issues with credit reporting companies. The first is that it is difficult to collect all of the relevant data and link it properly to the individual consumer. Sometimes, data is attached to the wrong individual, particularly if two different consumers have the same name. The second is that it is difficult to protect the large database against attack and unauthorized access. Because Equifax has a lot of valuable personal information about each consumer, including date of birth, Social Security Number, and credit card numbers, hackers could use the data for identity theft if they are successful in accessing it.
Data breach
In July 2017, hackers accessed the Equifax records of 143 million consumers. Among these are a many people who have never dealt directly with Equifax, both within the U.S. and abroad.[1] The attackers gained access using a known vulnerability in Apache Struts (CVE-2017-5638). A patch for the issues had been available since march 2017, but not used by Equifax.