Equifax under pressure after data breach update
Equifax is facing a fresh demand to disclose the full extent of last year’s data breach, following a report that it was bigger than previously disclosed.
The Wall Street Journal (WSJ) reported on Friday that cyber-thieves had accessed US citizens’ email addresses, tax ID numbers and more driver licence information than acknowledged earlier.
US Senator Elizabeth Warren is now demanding details of any other data the firm believes may have been stolen.
She wants a reply by the week’s end.
“As your company continues to issue incomplete, confusing, and contradictory statements and hide information from Congress and the public, it is clear that five months after the breach was publicly announced, Equifax has yet to answer this simple question in full: what was the precise extent of the breach?” the Democratic senator from Massachusetts wrote in a letter to the credit rating agency.
The WSJ said it was unclear how many of the 145.5 million Americans that the firm had previously said were affected by the breach, had had the additional information about them exposed.
The Atlanta, Georgia-based company, one of the biggest companies of its kind, had previously confirmed that social security numbers, birth dates and addresses had been compromised.
“We have complied with applicable notification requirements in the disclosure process,” the firm told the WSJ.
It added that it believed that the additional driver licence data exposed – which is reported to have involved issue dates and the states that granted them – was “extremely minimal”.
Free Active Directory Assessment
Get Visibility Into Privilege And Service Account Exposure
For a limited time, Attivo Networks is providing free Active Directory Security Assessments to demonstrate how ADAssessor provides unprecedented and continuous visibility to AD vulnerabilities.
Try Our Endpoint Detection Net (EDN) for Free
FAST AND EASY
Free use offer of our Award-winning security solution to prevent attackers from lateral movement, credential theft, and privilege escalation, fast and easy.
ADSecure 90-Day Free Trial
GET PROTECTION AGAINST UNAUTHORIZED ACCESS TO ACTIVE DIRECTORY
- Hide and deny access to AD objects
- Get alerted on unauthorized queries
- Attack details easily viewable in dashboard
- Your data remains on-premise