Experian Was Vulnerable to Same Attack Behind Equifax Breach

[Paul Wagenseil]

Another major credit-reporting agency, Experian, may have been vulnerable to the same attack that led to the massive Equifax data breach.

Experian Was Vulnerable to Same Attack Behind Equifax Breach : Read more

 

[rabenny203]

Claiming that Efx failed to patch in March is a falsehood, motive undetermined.
From Efx's Sept bulletin:
"The particular vulnerability in Apache Struts was identified and disclosed by U.S. CERT in early March 2017.
Equifax’s Security organization was aware of this vulnerability at that time, and took efforts to identify and to patch any vulnerable systems in the company’s IT infrastructure. "

 

[USAFRet]

Claiming that Efx failed to patch in March is a falsehood, motive undetermined.
From Efx's Sept bulletin:
"The particular vulnerability in Apache Struts was identified and disclosed by U.S. CERT in early March 2017.
Equifax’s Security organization was aware of this vulnerability at that time, and took efforts to identify and to patch any vulnerable systems in the company’s IT infrastructure. "

"took efforts" does not necessarily equal "did".

In any case, they were broken into. Whatever they did or did not do, was not enough.

Meanwhile, thee and me are left to look over our shoulders forever.
Meanwhile, people with degrees in Music and Russian are "retiring". hmmm....
http://money.cnn.com/2017/09/15/news/equifax-top-executives-retiring/index.html

 

[gamerk316]

As a general rule, IT will always be several months behind security patches, minimum. Security is not mandated, so is not considered important. Until something happens.