Equifax Breach: Setting the Record Straight
Summary: Bloomberg published a story citing three unnamed sources about an earlier Equifax breach that KrebsOnSecurity had already reported in May 2017, involving the TALX payroll division where identity thieves reset payroll managers' 4-digit PINs by answering knowledge-based authentication questions. Equifax told NPR the incident was unrelated to the Sept. 7 breach and involved a payroll-related service during the 2016 tax year, with unauthorized access to employee tax records occurring between April 17, 2016 and March 29, 2017.
What you should know: The breach affecting more than 140 million Americans was preceded by a TALX payroll incident that exposed employee tax and payroll records at customers including Northrop Grumman and the University of Louisville, and Equifax has said the two are unrelated while the same group of hackers was reported as possibly behind both.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026