Equifax ex-CEO Richard Smith says a single employee’s failure to heed a security alert led to the company failing to install a patch on a critical system, which was subsequently exploited by attackers. Smith’s assertion also raises the prospect that the credit bureau’s consumer data may have been tampered with, and it might not ever know. The Equifax breach, which began March 10, exposed 145.5 million U.S. consumers, including names, Social Security numbers, birthdates, addresses and, in some cases, addresses.”]
Source: https://www.govinfosecurity.com/blogs/equifax-ex-ceo-blames-one-employee-for-patch-failures-p-2551