Skip to main content

Fact check

Is it true: Equifax data breach (Jul-Sep 2017)?

Confirmed5% confidence

Yes — this is confirmed.

CVE-2017-5638 patch was available 8 March 2017. Breach began 13 May 2017. Discovered 29 July 2017. Disclosed 7 September 2017. CFO and three executives sold $1.8M in stock between discovery and disclosure. Jun Ying convicted of insider trading 2019. $700M FTC + state AG settlement July 2019. CEO Richard Smith, CIO David Webb, and CSO Susan Mauldin all resigned 26 September 2017.

The claim

The Equifax breach exposed the personally identifiable information of 147.9 million Americans — Social Security numbers, dates of birth, addresses, and driver's licence numbers — via an unpatched Apac

Key evidence

CVE-2017-5638 patch available 8 March 2017 — breach began 13 May 2017

The four indicted PLA officers were never tried, and are unlikely to ever be

Read the full evidence file

Conspirafy steelmans each claim, then follows the evidence. How we reach a verdict · Check another claim