Equifax data breach: What you need to know

Researchers Note: Orchestrated! Not hacked!

Equifax data breach: What you need to know

by Kaya Yurieff   @kyurieff September 10, 2017: 1:11 PM ET

http://money.cnn.com/2017/09/08/technology/equifax-hack-qa/index.html

A huge security breach at credit reporting company Equifax has exposed sensitive information, such as Social Security numbers and addresses, of up to 143 million Americans.

Unlike other data breaches, those affected by the breach may not even know they're customers of the company.

Equifax (EFX) is one of three nationwide credit-reporting agencies that track and rate the financial history of consumers. The company gets its data from credit card companies, banks, retailers and lenders -- sometimes without you knowing.

Related: The biggest data breaches ever

The data breach is among the worst ever because of the amount of people affected and the sensitive type of information exposed.

How many people were affected?

The company says as many as 143 million people in the United States were hit. Others in the U.K. and Canada were also impacted, but Equifax hasn't said how many. Credit card numbers for about 209,000 U.S. customers were compromised, in addition to "personal identifying information" on about 182,000 U.S. customers.

Who was impacted?

Equifax said it will send notices in the mail to people whose credit card numbers or dispute records were breached. The company said it found no evidence that consumers in other countries were affected beyond the U.S., U.K. and Canada.

What information was accessed?

The hackers accessed personal information such as names, Social Security numbers, birth dates, addresses, credit card numbers and the numbers of some driver's licenses.

When did this happen?

Equifax said the breach happened between mid-May and July. It discovered the hack on July 29. It informed the public on September 7.

How did this happen?

Equifax said criminals "exploited a U.S. website application vulnerability to gain access to certain files." A company spokesperson did not immediately respond to a request for further comment.

Who was behind the breach?

The company hasn't clarified but noted an investigation is ongoing.

Am I at risk, and what is Equifax doing to help?

Equifax is proposing that customers sign up for credit file monitoring and identity theft protection. It is giving free service for one year through its TrustedID Premier business, regardless of whether you've been impacted by the hack.

To enroll and/or check whether you were affected, visit www.equifaxsecurity2017.com and click on the Check Potential Impact tab. You'll need to provide your last name and the last six digits of your social security number. Once submitted, you will receive a message indicating whether you've been affected.

Then, you have the option to enroll in the program, but you can't actually sign up for the service until next week. Each customer is provided an enrollment date starting earliest on Monday.

Can I sue Equifax?

If you sign up for Equifax's offer of free identity theft protection and credit file monitoring, you may be limiting your rights to sue and be forced to take disputes to arbitration. But you can opt out of that provision if you notify the company in writing within 30 days. In addition, some attorneys argue that even if you don't opt out, the arbitration provision does not cover suits related to this breach.

Is anyone investigating the breach?

New York Attorney General Eric Schneiderman launched a formal investigation into the hack on Friday.

Meanwhile, Congressman Ted Lieu, a Democrat from California, sent a letter to House Judiciary Committee Chairman Bob Goodlatte and ranking member John Conyers calling for a hearing to investigate the data breach.

The House Financial Services Committee Chairman Jeb Hensarling, a Republican from Texas, also said his committee will hold a hearing on the breach.

Consumer Financial Protection Bureau is looking into the breach as well

"The CFPB is authorized to take enforcement action against institutions engaged in unfair, deceptive, or abusive acts or practices, or that otherwise violate federal consumer financial laws. We are looking into the data breach and Equifax's response, but cannot comment further at this time," a spokesperson told CNNMoney.

It seems like cybersecurity hacks are happening a lot. Is this the biggest ever?

The Equifax breach is one of the largest breaches ever. Some other high-profile examples include two breaches at Yahoo -- the bigger one involved 1 billion accounts, the lesser impacted 500 million -- and a hack at Myspace that involved 360 million accounts.

Have you been affected by the Equifax hack? Have you ever had your identity stolen? Tell us about it and you could be included in an upcoming CNNMoney story. Click here.

Let’s connect the dots:

Social Security Administration

James Roosevelt Jr. was an associate commissioner for the Social Security Administration, and is a director at the America's Health Insurance Plans.

Note: Akin, Gump, Strauss, Hauer & Feld, LLP was the lobby firm for the America's Health Insurance Plans, Equifax Inc., Visa U.S.A. Inc., and the American Express Company.

Vernon E. Jordan Jr. is a senior counsel for Akin, Gump, Strauss, Hauer & Feld, LLP, an honorary trustee at the Brookings Institution (think tank), Valerie B. Jarrett’s great uncle, a director at the American Friends of Bilderberg (think tank), was a director at the American Express Company, the president of the Economic Club of Washington, and a 2008 Bilderberg conference participant (think tank).

Foundation to Promote Open Society was a funder for the Brookings Institution (think tank), Refugees International, and the Committee for Economic Development.

George Soros was the chairman for the Foundation to Promote Open Society, Mark Schwartz was his senior adviser, is a director emeritus for Refugees International, a board member for the International Crisis Group, the founder & chairman for the Open Society Foundations, and the founder of the Soros Fund Management.

Mark Malloch-Brown was the vice chairman for Refugees International, a minister of state for the United Kingdom (UK), is a co-chair for the International Crisis Group, and a global board member for the Open Society Foundations.

Mark Schwartz was George Soros’s senior adviser, the president & CEO for the Soros Fund Management, and a director at MasterCard Incorporated.

David M. Rubenstein is a co-chairman for the Brookings Institution (think tank), and the president of the Economic Club of Washington.

Peter L. Scher is a trustee at the Brookings Institution (think tank), and a director at the Economic Club of Washington.

Carol A. Melton was a director at the Economic Club of Washington, and a trustee at the Committee for Economic Development.

Robert G. Liberatore was a director at the Economic Club of Washington, and a trustee at the Committee for Economic Development.

John L. Clendenin was a trustee at the Committee for Economic Development, and a director at Equifax Inc.

Carolyn S. Chin was a trustee at the Committee for Economic Development, and is a member of the Belizean Grove.

Siri S. Marshall is a member of the Belizean Grove, and a director at Equifax Inc.

Belizean_Grove is the equivalent to the male-only social group, the Bohemian Club.

Henrietta Holsman Fore is a member of the Belizean Grove, and a trustee at the Committee for Economic Development.

Julie Daum is a member of the Belizean Grove, and was a trustee at the Committee for Economic Development.

Davia B. Temin is a member of the Belizean Grove, and was a trustee at the Committee for Economic Development.

Mary Agnes Wilderotter is a member of the Belizean Grove, and a trustee at the Committee for Economic Development.

Marion C. Blakey is a member of the Belizean Grove, was a chairman for the National Transportation Safety Board, and an administrator for the National Highway Traffic Safety Administration.

Merit E. Janow is a member of the Belizean Grove, and a director at MasterCard Incorporated.

National Highway Traffic Safety Administration is a division of the U.S. Department of Transportation.

Mary Schiavo was an inspector general for the U.S. Department of Transportation, and is an analyst for CNN.

Ray H. LaHood was the secretary for the U.S. Department of Transportation, and Kathryn B. Thomson was his counselor.

Kathryn B. Thomson was Ray H. LaHood’s counselor, a general counsel for the U.S. Department of Transportation, a partner at Sidley Austin LLP, and is married to Christopher P. Lu.

Sidley Austin LLP is the lobby firm for MasterCard International Incorporated.

MasterCard International Incorporated is a subsidiary of MasterCard Incorporated.

Christopher P. Lu was a senior partner at Sidley Austin LLP, a secretary for the U.S. Department of Transportation, and is married to Kathryn B. Thomson.

Samuel K. Skinner was a secretary for the U.S. Department of Transportation, and a senior partner at Sidley Austin LLP.

Michelle Obama was a lawyer at Sidley Austin LLP.  

Barack Obama was an intern at Sidley Austin LLP, and Obamacare is his signature policy initiative.        

CGI Group Inc. was the Obamacare contractor that developed Healthcare.gov web site.

Donna S. Morea was the EVP for the CGI Group Inc., and a trustee at the Committee for Economic Development. 

John L. Clendenin was a trustee at the Committee for Economic Development, and a director at Equifax Inc.

Carol A. Melton was a trustee at the Committee for Economic Development, and a director at the Economic Club of Washington.

David M. Rubenstein is the president of the Economic Club of Washington, a co-chairman for the Brookings Institution (think tank), and a friend of Thomas E. Donilon.

Peter L. Scher is a director at the Economic Club of Washington, and a trustee at the Brookings Institution (think tank).

Vernon E. Jordan Jr. was the president of the Economic Club of Washington, a director at the American Express Company, is a senior counsel for Akin, Gump, Strauss, Hauer & Feld, LLP, an honorary trustee at the Brookings Institution (think tank), Valerie B. Jarrett’s great uncle, a director at the American Friends of Bilderberg (think tank), and a 2008 Bilderberg conference participant (think tank).

Akin, Gump, Strauss, Hauer & Feld, LLP was the lobby firm for the America's Health Insurance Plans, Visa U.S.A. Inc., Equifax Inc., and the American Express Company.

James Roosevelt Jr. is a director at the America's Health Insurance Plans, and was an associate commissioner for the Social Security Administration.

Suzanne Nora Johnson is a trustee at the Brookings Institution (think tank), and a director at Visa Inc.

Visa U.S.A. Inc. is a subsidiary of Visa Inc.

Visa Canada is a subsidiary of Visa Inc.

Maynard G. Webb Jr. is a director at Visa Inc., and a chairman emeritus for Yahoo! Inc.

Suzanne Nora Johnson is a director at Visa Inc., and was a governor for the American Red Cross.

Martha Nelson is an SVP at Yahoo! Inc., and was a governor for the American Red Cross.

Ajay Banga is a governor for the American Red Cross, and the president & CEO for MasterCard Incorporated.

Gina F. Adams was a governor for the American Red Cross, and a director at the Economic Club of Washington.

Carol A. Melton was a director at the Economic Club of Washington, and a trustee at the Committee for Economic Development.

John L. Clendenin was a trustee at the Committee for Economic Development, and a director at Equifax Inc.

Ronald A. Williams is a trustee at the Committee for Economic Development, and a director at the American Express Company.

Steven E. Carr was a governor for the American Red Cross, and a director at Refugees International.

Carol Ann Haake was a governor for the American Red Cross, and a director at Refugees International.

Michael W. Hawkins was a governor for the American Red Cross, and is a director at Refugees International.

Mark Malloch-Brown was the vice chairman for Refugees International, a minister of state for the United Kingdom (UK), is a co-chair for the International Crisis Group, and a global board member for the Open Society Foundations.

Ann F. Kaplan was a governor for the American Red Cross, and is a member of the Belizean Grove.

Siri S. Marshall is a member of the Belizean Grove, and a director at Equifax Inc.

Belizean_Grove is the equivalent to the male-only social group, the Bohemian Club.

Henrietta Holsman Fore is a member of the Belizean Grove, and a trustee at the Committee for Economic Development.

Julie Daum is a member of the Belizean Grove, and was a trustee at the Committee for Economic Development.

Davia B. Temin is a member of the Belizean Grove, and was a trustee at the Committee for Economic Development.

Mary Agnes Wilderotter is a member of the Belizean Grove, and a trustee at the Committee for Economic Development.

Marion C. Blakey is a member of the Belizean Grove, was a chairman for the National Transportation Safety Board, and an administrator for the National Highway Traffic Safety Administration.

Merit E. Janow is a member of the Belizean Grove, and a director at MasterCard Incorporated.

National Highway Traffic Safety Administration is a division of the U.S. Department of Transportation.

Elizabeth H. Dole was the secretary for the U.S. Department of Transportation, and the president for the American Red Cross.

Ann F. Kaplan was a governor for the American Red Cross, and is a member of the Belizean Grove.

Siri S. Marshall is a member of the Belizean Grove, and a director at Equifax Inc.

Lurita Alexis Doan is a member of the Belizean Grove, and was an administrator for the General Services Administration.

General Services Administration is a member, info tech committee for the Critical Infrastructure Partnership Advisory Council.

Equifax Inc. is a member, info tech committee for the Critical Infrastructure Partnership Advisory Council.

Google Inc. is a member, info tech committee for the Critical Infrastructure Partnership Advisory Council.

Akin, Gump, Strauss, Hauer & Feld, LLP is the lobby firm for Google Inc., was the lobby firm for the America's Health Insurance Plans, Visa U.S.A. Inc., and Equifax Inc.

James Roosevelt Jr. is a director at the America's Health Insurance Plans, and was an associate commissioner for the Social Security Administration.

Thomas E. Donilon is a friend of David M. Rubenstein, a partner at O'Melveny & Myers LLP, was a trustee at the Brookings Institution (think tank), a director at the American Friends of Bilderberg (think tank), and a 2008 Bilderberg conference participant (think tank).

Ronald A. Klain was a partner at O'Melveny & Myers LLP, and is the president of Case Holdings.

Hollister K. Petraeus is an investor in Case Holdings, married to David H. Petraeus, and helped establish the Consumer Financial Protection Bureau.

David H. Petraeus is married to Hollister K. Petraeus, and the KKR Global Institute chairman for KKR & Co. LP.

Edwin L. Artzt was a senior adviser for KKR & Co. LP, and a director at the American Express Company.

Harvey Golub was a chairman & CEO for the American Express Company, and a director at the Campbell Soup Company.

Denise M. Morrison is the president & CEO for the Campbell Soup Company, and Mary Agnes Wilderotter’s sister.

Mary Agnes Wilderotter is Denise M. Morrison’s sister, a member of the Belizean Grove, and a trustee at the Committee for Economic Development.

Siri S. Marshall is a member of the Belizean Grove, and a director at Equifax Inc.

Belizean_Grove is the equivalent to the male-only social group, the Bohemian Club.

Henrietta Holsman Fore is a member of the Belizean Grove, and a trustee at the Committee for Economic Development.

Julie Daum is a member of the Belizean Grove, and was a trustee at the Committee for Economic Development.

Davia B. Temin is a member of the Belizean Grove, and was a trustee at the Committee for Economic Development.

Marion C. Blakey is a member of the Belizean Grove, was a chairman for the National Transportation Safety Board, and an administrator for the National Highway Traffic Safety Administration.

Merit E. Janow is a member of the Belizean Grove, and a director at MasterCard Incorporated.

National Highway Traffic Safety Administration is a division of the U.S. Department of Transportation.