Four members of China’s military have been indicted by the U.S. government on charges of hacking into Equifax Inc.
They exploited an Apache vulnerabilityon the servers.The security incident occurred in 2017, when the suspects obtained information for nearly 150 million Americans. The hack, one of the largest in history, exposed sensitive information, including names, Social Security numbers, driver’s license numbers and addresses. Attorney General William Barr said on Monday the hack “not only caused signiﬁcant ﬁnancial damage to Equifax, but invaded the privacy of many millions of Americans, and imposed substantial costs and burdens on them as they have had to take measures to protect against identity theft.”
The data breach prompted the resignation of CEO Richard Smith and investigations by federal regulators. Equifax agreed to pay up to $700 million to settle federal and state investigations into how it handled the breach.The nine-count indictment was handed down by a federal grand jury in Atlanta. The indictment also alleges that the hackers stole trade secrets and intellectual property. Equifax is a consumer credit reporting agency headquartered in Atlanta, which sells credit monitoring and fraud prevention services.