Credit reporting agency Equifax exposed the personal information of nearly 150 million people in a 2017 data breach. Now, it will pay up to $700 million in fines and monetary relief to consumers.
The proposed settlement is subject to approval by a federal court and was announced Monday by the company, the Federal Trade Commission, the Consumer Financial Protection Bureau, 48 states, the District of Columbia and Puerto Rico. It will be the largest settlement ever paid for a data breach. As much as $425 million will compensate affected people with credit monitoring services. The deal also requires more changes to how Equifax handles private user data. For example, the company will have to adjust its information security protocols.