Equifax Says 2.5 Mln Addl US Consumers Potentially Impacted By Hack

(RTTNews) - Equifax Inc. (EFX) said that the cybersecurity firm Mandiant has completed the forensic portion of its investigation of the cybersecurity incident disclosed on September 7 to finalize the consumers potentially impacted. The completed review determined that approximately 2.5 million additional U.S. consumers were potentially impacted, for a total of 145.5 million.

Mandiant did not identify any evidence of additional or new attacker activity or any access to new databases or tables. Instead, this additional population of consumers was confirmed during Mandiant's completion of the remaining investigative tasks and quality assurance procedures built into the investigative process.

The completed review also has concluded that there is no evidence the attackers accessed databases located outside of the United States.

The company previously had stated that there may have been up to 100,000 Canadian citizens impacted, but that number was preliminary and did not materialize. The completed review subsequently determined that personal information of approximately 8,000 Canadian consumers was impacted. In addition, it also was determined that some of the consumers with affected credit cards announced in the company's initial statement are Canadian. The company will mail written notice to all of the potentially impacted Canadian citizens.

The forensic investigation related to United Kingdom consumers has been completed and the resulting information is now being analyzed in the United Kingdom. Equifax is continuing discussions with regulators in the United Kingdom regarding the scope of the company's consumer notifications as the analysis of the completed forensic investigation is completed.