Cyber Risks · Krebs on Security

Here’s What to Ask the Former Equifax CEO

Summary: Richard Smith resigned as Equifax CEO after a breach exposed 143 million Social Security numbers, and is scheduled to testify before four congressional committees the week of October 3, 2017. Krebs lists questions for lawmakers, including why Equifax waited from the Apache Struts patch on March 8, 2017 until after July 30, 2017 to apply it, and whether the company faced extortionists before its September 7 disclosure.

Why it matters: Equifax knew of the intrusion on July 29 but did not disclose until September 7, and the unpatched Struts flaw sat open for four and a half months - the gap between detection and disclosure is where 143 million people's identities were left exposed.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related