[1 minute read]
- Equifax is one of the nation’s 3 main credit agencies. They keep records of your credit history. The attack lasted from mid-May to July and discovered on July 29th. It has exposed information of 143 million people in the USA – nearly half of US population.
- Attack vector: a vulnerability in Apache Struts 2 that allows remote code injection via HTTP. Stop reading and patch it if you have it in your environment.
- The hackers accessed people’s names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. They also stole the credit card information and dispute documents of some people.
- Equifax has created the following website www.equifaxsecurity2017.com, which allows you to enroll for free credit monitoring for 1 year. Whether you are impacted or not, go ahead and sign for it!
- Other actions you probably want to take include freeze your credit, closely monitor your credit card accounts, get your free credit reports from annualcreditreport.com (one report per year per credit agency is free) and file your taxes early.