8-KOther EventsExhibits & Filings

EQUIFAX INC 8-K Report, Corporate Update (May 7, 2018)

Filed May 7, 2018For Securities:EFX

Summary

This Form 8-K filing from Equifax Inc. (EFX) provides an update regarding the previously disclosed cybersecurity incident. The company submitted a statement to Congressional committees detailing further information about the data compromised, specifically focusing on government-issued identification documents uploaded to its online dispute portal and refining the estimated number of consumers impacted by the theft of various data elements. Importantly, Equifax reiterates that these updates do not identify additional affected consumers and do not necessitate further consumer notifications, aiming to provide transparency in response to ongoing governmental inquiries. The filing clarifies that approximately 38,000 driver's licenses, 12,000 Social Security cards, 3,200 passports, and 3,000 other government-issued identification documents were accessed via the online dispute portal. While these documents contained sensitive information, the consumers whose documents were accessed had already been individually notified in 2017 regarding the specific files uploaded. The report also refines the estimated number of consumers impacted by the theft of specific data elements, with updated figures for names, dates of birth, Social Security numbers, addresses, and other personal information, reinforcing that no new consumer notifications are required.

Key Highlights

  • 1Equifax provided a statement to Congressional committees detailing the cybersecurity incident, offering additional specifics on compromised data.
  • 2Analysis of the online dispute portal revealed approximately 38,000 driver's licenses, 12,000 Social Security cards, and 3,200 passports were accessed.
  • 3Consumers whose documents were uploaded to the dispute portal had already been individually notified in 2017.
  • 4No additional consumers are identified as affected by this new information.
  • 5No further consumer notifications are required as a result of these updated details.
  • 6The company refined the estimated number of consumers impacted for various stolen data elements, including names (146.6 million), dates of birth (146.6 million), and Social Security numbers (145.5 million).
  • 7The filing emphasizes ongoing cooperation with governmental requests for information regarding the incident.

Frequently Asked Questions

No, Equifax explicitly states that the additional details provided in this filing do not identify any new consumers affected by the cybersecurity incident and do not require any additional consumer notifications.

The company's analysis indicated that approximately 38,000 driver's licenses, 12,000 Social Security or taxpayer ID cards, 3,200 passports or passport cards, and 3,000 other government-issued identification documents (such as military IDs, state-issued IDs, and resident alien cards) were accessed.

Yes, consumers who had uploaded dispute documents to the online portal and whose documents contained government-issued identifications were notified in 2017 about the specific files they had uploaded that were accessed. This recent analysis does not require new notifications because all affected individuals were previously informed.

Yes, Equifax has provided updated approximate numbers for several stolen data elements. For example, names and dates of birth are now estimated to impact 146.6 million consumers, and Social Security numbers are estimated to impact 145.5 million consumers. Other data elements like addresses, gender, phone numbers, and email addresses also have refined figures.