Breachesby GlyphEquifax
Disclosed Sep 7, 2017147,000,000 affectedSettled
2017 breach of 147M people; up to USD 700M FTC/CFPB/states settlement
Attackers exploited an unpatched web application flaw at Equifax between May and July 2017 and stole names, Social Security numbers, birth dates, addresses and some payment card records of about 147 million people. Equifax agreed to pay at least USD 575M and up to USD 700M to the FTC, CFPB and 50 states and territories, and was fined GBP 500,000 by the UK ICO.
What is known
| People affected | 147,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 7, 2017 |
| Discovered | Jul 29, 2017 |
| Happened | May 13, 2017 |
| Attack | Hacking |
| Data exposed | NamesSocial Security numbersDates of birthAddressesGovernment IDsPayment cards |
| Sector | Finance · US |
| Status | Settled |
| Lawsuit or fine | USD 575M to 700M FTC/CFPB/states settlement (July 2019); GBP 500,000 ICO fine (Sept 2018) (about $700M) |
Sources
California Attorney General breach notice: EquifaxWashington Attorney General breach notice: EquifaxOregon DOJ breach notice: EquifaxEquifax to Pay $575 Million as Part of Settlement with FTC, CFPB, and States Related to 2017 Data BreachEquifax Announces Cybersecurity Incident Involving Consumer Information (8-K Ex. 99.1)NY AG: Equifax USD 600 Million payment2017 Equifax data breach (Wikipedia)Equifax slapped with UK's maximum penalty over 2017 data breachIndiana Attorney General 2017 data breach report: EquifaxMaine Attorney General breach notice archive: Equifax
Notices filed
Other breaches at Equifax
History of this record
empty to or-doj: 143000000 (restored: the portal's own figure)by correctionSource
or-doj: 143000000 to by correctionSource
empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%208-1-2021%20through%2012-5-2018%20REDACTED.xlsxby backfillSource
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2017.pdfby backfillSource
575000000 to 700000000by seedSource
At least $575M, up to $700M, settlement with FTC, CFPB and 50 states and territories (2019) to USD 575M to 700M FTC/CFPB/states settlement (July 2019); GBP 500,000 ICO fine (Sept 2018)by seedSource
Equifax said criminals exploited a US website application vulnerability and accessed names, Social Security numbers, birth dates, addresses and some driver's license numbers, plus card numbers for about 209,000 people. It first reported 143 to Attackers exploited an unpatched web application flaw at Equifax between May and July 2017 and stole names, Social Security numbers, birth dates, addresses and some payment card records of about 147 million people. Equifax agreed to pay at by seedSource
Web application flaw exposes personal data of 143 million US consumers to 2017 breach of 147M people; up to USD 700M FTC/CFPB/states settlementby seedSource
confirmed to settledby seedSource
empty to 575000000by seedSource
empty to At least $575M, up to $700M, settlement with FTC, CFPB and 50 states and territories (2019)by seedSource
tech to financeby seedSource
[] to ["names","ssn","dob","addresses","government-id","payment-card"]by seedSource
empty to organizationby seedSource
empty to 147000000by seedSource
empty to Equifax said criminals exploited a US website application vulnerability and accessed names, Social Security numbers, birth dates, addresses and some driver's license numbers, plus card numbers for about 209,000 people. It first reported 143by seedSource
empty to Web application flaw exposes personal data of 143 million US consumersby seedSource
unknown to hackingby backfillSource
empty to 2017-07-29by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.