Skip to main content

Fact check

Is it true: Equifax data breach (Jul-Sep 2017)?

Confirmed5% confidence

Yes — this is confirmed.

CVE-2017-5638 patch was available 8 March 2017. Breach began 13 May 2017. Discovered 29 July 2017. Disclosed 7 September 2017. CFO and three executives sold $1.8M in stock between discovery and disclosure. Jun Ying convicted of insider trading 2019. $700M FTC + state AG settlement July 2019. CEO Richard Smith, CIO David Webb, and CSO Susan Mauldin all resigned 26 September 2017.

The claim

The Equifax breach exposed the personally identifiable information of 147.9 million Americans — Social Security numbers, dates of birth, addresses, and driver's licence numbers — via an unpatched Apac

Key evidence

CVE-2017-5638 patch available 8 March 2017 — breach began 13 May 2017

Apache Struts Patch Failure Was Negligence in an Enterprise-Wide Process, Not Coordination

Read the full evidence file

Conspirafy steelmans each claim, then follows the evidence. How we reach a verdict · Check another claim