The quartet – alleged members of the PLA 54th Research Institute – were served with a nine-count indictment, as detailed in a US Department of Justice statement on the case. In February 2020, US authorities unsealed an indictment charging four named members of the Chinese military with the cyber-attack. This compromised server acted as a springboard that allowed hackers to access Equifax’s internal systems before stealing credentials that allowed them to query its databases.įROM THE ARCHIVES Equifax a year on: Little has changed – at least for the billion-dollar companyĭatabase queries were stored in compressed files that were slowly and systematically siphoned off. The root cause of the attack was a critical Apache Struts vulnerability, discovered and resolved in March 2017, that was left unresolved on at least one web-facing Equifax server.Īttackers took advantage of an unpatched Apache Struts installation to hack into Equifax’s dispute resolution portal.
Subsequent computer forensics work revealed attackers had access to Equifax systems between May and July 2017, when the breach was detected and resolved. A smaller number of Canadians were also affected.Ĭatch up on the latest data breach news and analysis
The breach exposed the credit card data of a smaller subset of around 209,000 victims.Īn estimated 15 million British citizens were affected by the incident, of which 694,000 had sensitive data exposed.
#Equifax data breach settlement. license#
Names, Social Security numbers, birth dates, addresses as well as driver’s license details of more than 10 million individuals were exposed after attackers used a known vulnerability to break into Equifax’s databases. Settlement includes up to $425 million to help people affected by 2017 mega breachĬredit reference agency Equifax has finalized a settlement for a 2017 data breach that affected more than 147 million US citizens and 15 million Brits.Įquifax first admitted the massive breach in September 2017.
0 kommentar(er)
