Nonprofit Resources

print

How the Equifax Breach Could Affect Your Organization

print
Equifax Inc. announced that cyber criminals exploited a vulnerability in a U.S. website application to gain access to files containing names, Social Security numbers, birth dates, addresses, and driver’s license numbers, in some cases.

The breach may impact approximately 143 million U.S. consumers, or 44.5% of the U.S. population. While the Yahoo breach was larger, involving 500 million email accounts, the scope of the information compromised in the Equifax breach makes it the worst leak of personal information in history. Equifax also disclosed that credit card numbers for approximately 209,000 U.S. consumers and dispute documents with personal identifying information for another 182,000 U.S. consumers were accessed.

The unauthorized access occurred between mid-May and July 2017, and was discovered on July 29. Equifax has set up a website consumers can use to see if they may be impacted by the breach, but issues with the reliability of the site have been reported.

How This Could Impact Your Organization

Although the breach involves consumer data, the exposure of employees’ personal identifying information can pose a risk for organizations as well. Among other risks, breached information for individuals can be used to perpetrate social engineering attacks on the organizations where they are employed.

That’s why a layered approach to cybersecurity is crucial, along with independent testing that includes vulnerability testing and information security controls testing.

If you have any questions, please contact us at cybersecurity@capincrouse.com.

Lisa Traina

Lisa is a partner at CapinTech. She uses her more than 30 years of experience to assist organizations in implementing measures to secure data and manage risks efficiently and effectively. She is a nationally recognized speaker and author, and serves on the AICPA Cybersecurity Task Force. Lisa founded Traina & Associates in 1999 to provide IS security services to a broad range of industries. Traina & Associates joined CapinCrouse in January 2017 and is now CapinTech.

Leave a Comment