How Equifax Was Breached in 2017
blog.0x7d0.dev
How Equifax Was Breached in 2017
1–10 of 117 posts
Re: How Equifax Was Breached in 2017
#2If any company deserves the corporate death penalty, it's Equifax after this fiasco. That company should no longer exist.
Re: How Equifax Was Breached in 2017
#3If any company deserves the corporate death penalty, it's Equifax after this fiasco. That company should no longer exist.
[deleted]
Re: How Equifax Was Breached in 2017
#4If any company deserves the corporate death penalty, it's Equifax after this fiasco. That company should no longer exist.
Ok, but please don't post generic comments, and especially not generic-indignant comments, to HN. They lead to significantly less interesting discussion.
Re: How Equifax Was Breached in 2017
#5TLDR is:
Equifax had no working firewall / intrusion detection for almost a year, because they did not update their snakeoil MITM certificate and forgot about it.
Remind me again, how did Equifax get SOC 1&2, and ISO27001 certified?
Oh yeah, they probably have a checklist for that, so they must be secure. /s
Re: How Equifax Was Breached in 2017
#6Re: How Equifax Was Breached in 2017
#7Didn't Equifax receive practically no penalty for it though?
So, what would be the motivation to avoid future things like this happening again?
Re: How Equifax Was Breached in 2017
#8> Malicious actors had been exfiltrating data for several months and had already collected personal information from 163 million customers.
I don't think "customers" is the right term, considering I never wanted them collecting data about me.
Re: How Equifax Was Breached in 2017
#9Wow, the fact that they remained undetected for so long and used wget for data exfiltration..
Hopefully security posture has increased since
Re: How Equifax Was Breached in 2017
#10Didn't Equifax receive practically no penalty for it though? So, what would be the motivation to avoid future things like this happening again?
make sure to become too big to fail before you fail