STREAMING NOW: Watch Now

Equifax to pay up to $700M in data breach settlement

Equifax has agreed to pay $700 million, potentially more, to settle with the federal authorities and states over its 2017 data breach that exposed the Social Security numbers and other private information of nearly 150 million people, roughly half of the U.S. population.

Posted: Jul 22, 2019 3:14 PM

NEW YORK (AP) — Equifax has agreed to pay $700 million, potentially more, to settle with the federal authorities and states over its 2017 data breach that exposed the Social Security numbers and other private information of nearly 150 million people, roughly half of the U.S. population.

The settlement with the Consumer Financial Protection Bureau and the Federal Trade Commission, as well as 48 states, the District of Columbia and Puerto Rico, would provide up to $425 million in monetary relief to consumers, a $100 million civil money penalty, and other relief.

The breach was one of the largest ever to threaten the private information. The consumer reporting company, based in Atlanta, did not detect the attack for more than six weeks. The compromised data included Social Security numbers, birth dates, addresses, driver license numbers, credit card numbers and in some cases, data from passports. The breach resulted in the abrupt dismissal of Equifax’s then CEO, as well as numerous other executives at the company.

“The (settlement) that we are announcing today reinforces our commitment to putting consumers first and safeguarding their data - and reflects the seriousness with which we take this matter,” said Equifax CEO Mark Begor.

Equifax stock, which plunged 30% in the days following the disclosure of the breach, have returned to levels where they traded before the incident. Shares of Equifax rose 2% to $140.26. A share cost $141.45 in the hours before the breach was disclosed on Sept. 7, 2017.

The relief is coming in multiple forms. Equifax will pay initially $380.5 million into a fund to cover potential identity theft that was caused as a result of the breach, as well as any costs that a potential victim had to pay for credit monitoring. An additional $125 million would be paid additionally by Equifax if victims’ out-of-pocket expenses end up depleting the initial fund. Equifax could also potentially pay $2 billion to cover credit monitoring services if all 147 million victims sign up for credit monitoring services.

Victims of Equifax’s breach will be eligible for up to 10 years of credit monitoring services for free, seven years of identity-restoration services, and six free copies of Equifax’s credit reports per year for the next seven years. That’s on top of the free credit reports each U.S. resident is eligible for from the credit reporting companies under U.S. law.

If consumers choose not to enroll in the free credit monitoring product, they may seek up to $125 as a reimbursement for the cost of a credit-monitoring product of their choice. Consumers must submit a claim in order to receive free credit monitoring or cash reimbursements.

Equifax will have to spend at least $1 billion over five years to enhance its cybersecurity practices.

On top of that, Equifax will have to pay a $100 million fine to the CFPB, and pay tens of millions of dollars to states and territories to settle those lawsuits as well.

“Companies that profit from personal information have an extra responsibility to protect and secure that data,” said FTC Chairman Joe Simons. “Equifax failed to take basic steps that may have prevented the breach that affected approximately 147 million consumers. This settlement requires that the company take steps to improve its data security going forward, and will ensure that consumers harmed by this breach can receive help protecting themselves from identity theft and fraud.”

Consumer advocates were generally positive on the settlement, but had concerns on the timescale of the settlement. Because the thieves stole permanently identifiable information like Social Security numbers and birthdates, the data could be used for decades to commit identity theft.

“What happens if a consumer is the victim of ID theft in the fifth year resulting from the breach, which costs the consumer tens of thousands of dollars?,” said Chi Chi Wu, staff attorney at National Consumer Law Center.

The settlement must still be approved by the federal district court in the Northern District of Georgia.

For information on the terms of the settlement, as well as to file a claim, potential victims should go to https://www.equifaxbreachsettlement.com .

Terre Haute
Overcast
54° wxIcon
Hi: 64° Lo: 47°
Feels Like: 54°
Robinson
Overcast
53° wxIcon
Hi: 61° Lo: 45°
Feels Like: 53°
Indianapolis
Scattered Clouds
49° wxIcon
Hi: 63° Lo: 48°
Feels Like: 45°
Rockville
Overcast
49° wxIcon
Hi: 63° Lo: 47°
Feels Like: 49°
Casey
Overcast
56° wxIcon
Hi: 61° Lo: 48°
Feels Like: 56°
Brazil
Overcast
54° wxIcon
Hi: 63° Lo: 47°
Feels Like: 54°
Marshall
Overcast
54° wxIcon
Hi: 63° Lo: 46°
Feels Like: 54°
Breezy, warmer Wednesday
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 292082

Reported Deaths: 8858
CountyConfirmedDeaths
Cook1443155217
DuPage17589561
Lake16953487
Will14045378
Kane13159326
St. Clair6665190
Winnebago6037149
Madison5760137
Champaign473320
McHenry4609118
Peoria351050
McLean329523
Rock Island302676
Kankakee275277
Unassigned2532244
Sangamon243245
Kendall202025
Tazewell178025
LaSalle172557
DeKalb159038
Macon156044
Coles147231
Williamson140645
Jackson126224
Clinton119020
Adams114910
Boone112823
Randolph94111
Effingham8722
Vermilion7914
Whiteside75320
Ogle7286
Monroe68016
Knox6723
Grundy6705
Henry6665
Morgan66223
Bureau65211
Jefferson62038
Marion5661
Christian55411
Macoupin5507
Franklin5413
Stephenson5296
Union51524
McDonough48215
Logan4681
Crawford4584
Woodford4266
Fayette4183
Livingston4036
Cass39811
Jersey39415
Shelby3944
Lee3831
Montgomery37613
Iroquois36719
Perry35315
Saline3464
Warren3332
Bond3305
Douglas3147
Wayne2805
Jo Daviess2662
Lawrence2592
Carroll2355
Greene22911
Cumberland2185
Hancock2183
Moultrie2183
Washington2161
Jasper2139
Richland2136
Pulaski1811
Fulton1780
Clark1742
White1690
Wabash1583
Clay1560
Johnson1560
Mason1531
Mercer1405
Piatt1390
Pike1341
De Witt1252
Menard1251
Edgar1138
Massac1132
Ford1055
Marshall1050
Alexander831
Scott790
Gallatin732
Hamilton712
Henderson690
Edwards640
Brown620
Calhoun600
Putnam570
Stark552
Schuyler500
Hardin400
Pope291
Out of IL20

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 118322

Reported Deaths: 3591
CountyConfirmedDeaths
Marion21502767
Lake10688323
Elkhart6707111
St. Joseph6619113
Allen6330205
Hamilton4938109
Vanderburgh378131
Hendricks2766124
Monroe265536
Tippecanoe256613
Johnson2352124
Clark225957
Porter219947
Delaware200162
Cass19559
Vigo186827
Madison170375
LaPorte149141
Floyd139664
Warrick138242
Howard132663
Kosciusko125917
Bartholomew118457
Marshall101524
Dubois99919
Boone99146
Grant95134
Hancock94643
Noble93132
Henry81226
Jackson7739
Wayne77014
Morgan73438
Daviess68028
Shelby68029
Dearborn67528
LaGrange64011
Clinton62314
Harrison59224
Putnam58411
Gibson5355
Knox5289
Lawrence51629
Montgomery51121
DeKalb48811
White48714
Decatur45939
Miami4394
Greene42735
Fayette42313
Jasper4012
Scott39011
Steuben3907
Posey3460
Sullivan33812
Jennings31612
Franklin31325
Clay3085
Ripley3078
Orange28824
Whitley2826
Carroll27813
Adams2763
Wabash2728
Starke2717
Washington2701
Wells2674
Spencer2633
Jefferson2503
Huntington2473
Fulton2442
Tipton22822
Randolph2238
Perry22113
Jay1920
Newton17411
Owen1711
Martin1680
Pike1641
Rush1574
Vermillion1310
Fountain1292
Blackford1213
Pulaski1141
Crawford1100
Parke1072
Brown1043
Benton870
Ohio797
Union790
Switzerland690
Warren411
Unassigned0226