Equifax to pay up to US$700M in data breach settlement

Equifax will pay up to US$700 million to settle with U.S. federal and state governments over a 2017 data breach that exposed the private information of nearly 150 million people, including thousands in Canada.

The settlement with the U.S. Consumer Financial Protection Bureau and the Federal Trade Commission, as well as 48 states and the District of Columbia and Puerto Rico, would provide up to US$425 million in monetary relief to consumers, a US$100 million civil money penalty, and other relief.

The breach was one of the largest ever to threaten private information. The consumer reporting agency, based in Atlanta, did not detect the attack for more than six weeks. The compromised data included Social Security numbers, birth dates, addresses, driver license numbers, credit card numbers and in some cases, data from passports.

“The consumer fund of up to US$425 million that we are announcing today reinforces our commitment to putting consumers first and safeguarding their data – and reflects the seriousness with which we take this matter,” said Equifax CEO Mark Begor.

Canada’s Office of the Privacy Commissioner concluded in April that the company fell short of their privacy obligations to Canadians, including poor security safeguards and holding information too long, but it did not level fines.

The privacy commissioner, which found that about 19,000 Canadians were affected by the breach, said the company entered into a compliance agreement and had taken steps to improve its security and accountability.

Equifax Inc. detected the attack on July 29, 2017 and contained it the following day. However, Equifax Canada wasn’t notified of the breach until just before the U.S. parent company publicly disclosed it on Sept. 7, 2017.

The breach occurred after hackers gained access to Equifax Inc.’s systems through a vulnerability the company had known about for more than two months, but had not fixed.

While Equifax Canada offered free credit monitoring to breach victims for at least four years, other protections didn’t match what was offered by the parent company, including credit freezes that restrict access to credit files.

The privacy commissioner also found that the transfer of information about Canadians to the U.S. without their knowledge was inconsistent with its obligations to obtain consent before disclosing personal information to third parties located in another country.

Equifax stock, which plunged 30 per cent in the days following the disclosure of the breach, have returned to levels where they traded before the incident.

Affected U.S. consumers may be eligible to receive money by filing one or more claims for conditions including money spent purchasing credit monitoring or identity theft protection after the breach and the cost of freezing or unfreezing credit reports at any consumer reporting agency.

All impacted consumers in the U.S. would be eligible to receive at least 10 years of free credit-monitoring, at least seven years of free identity-restoration services, and, starting on Dec. 31 and extending seven years, all U.S. consumers may request up to six free copies of their Equifax credit report during any 12-month period.

If consumers choose not to enrol in the free credit monitoring product available through the settlement, they may seek up to $125 as a reimbursement for the cost of a credit-monitoring product of their choice. Consumers must submit a claim in order to receive free credit monitoring or cash reimbursements.

“Companies that profit from personal information have an extra responsibility to protect and secure that data,” said FTC Chairman Joe Simons. “Equifax failed to take basic steps that may have prevented the breach that affected approximately 147 million consumers. This settlement requires that the company take steps to improve its data security going forward, and will ensure that consumers harmed by this breach can receive help protecting themselves from identity theft and fraud.”

The company said earlier this year that it had set aside around US$700 million to cover anticipated settlements and fines.

The settlement must still be approved by the federal district court in the Northern District of Georgia.

Just Posted

Woman killed in collision west of Rocky Mountain House

A 42-year-old woman is dead after a two-vehicle collision in Clearwater County… Continue reading

Rough camper “tree house” found hidden in Red Deer woods

“This took a bit of work,” says man who discovered it

Central Alberta has one less peacekeeper with death of Nobel Prize-winning vet

The late Wayne Coubrough and Wayne Bevis helped diffuse tensions in the Middle East

TC Energy applauds Nebraska court victory over opponents of Keystone XL pipeline

CALGARY — One of the last major hurdles for the Keystone XL… Continue reading

Tribunal rules Edmonton pharmacist harmed integrity of profession

EDMONTON — An Edmonton pharmacist has been found guilty of unprofessional conduct… Continue reading

WATCH: Trailer stolen from Red Deer deli

A Red Deer business has contacted police after a trailer was stolen… Continue reading

Your community calendar

Thursday The Red Deer and District Garden Club hosts its annual Flower… Continue reading

Alberta loses extra-innings thriller at men’s baseball nationals

Alberta came up just short in their second game at the Baseball… Continue reading

G7 leaders should step up own climate plans to help the Amazon, Greenpeace says

OTTAWA — Some Canadian environment groups are urging Prime Minister Justin Trudeau… Continue reading

Third-party buys billboard to promote Bernier’s anti-mass immigration stance

OTTAWA — Billboards with Maxime Bernier’s face and a slogan advocating against… Continue reading

Ottawa ready to pass law forcing CN to restore rusting Quebec Bridge

Ottawa says its ready to take ownership of the aging Quebec Bridge… Continue reading

TC Energy applauds Nebraska court victory over opponents of Keystone XL pipeline

CALGARY — One of the last major hurdles for the Keystone XL… Continue reading

‘Our bigger enemy’: Trump escalates attack on Fed chief

WASHINGTON — President Donald Trump launched a furious and highly personal attack… Continue reading

Ontario shipyard accuses feds of unfairly stacking deck in Davie’s favour

OTTAWA — An Ontario shipyard is accusing the federal government of trying… Continue reading

Most Read