Massachusetts and Indiana have reached separate settlements with Equifax over the 2017 data breach that exposed the personal information of millions of residents of both states. Massachusetts will receive $18 million to settle its claims, says Attorney General Maura Healey. Indiana’s attorney general says the company also agreed to make changes to its security policies to comply with laws in the two states. At the heart of the breach was Equifax’s failure to patch a vulnerability in the Apache Struts open source web application framework, according to numerous investigations.”]
Source: https://www.cuinfosecurity.com/equifax-settles-massachusetts-indiana-over-2017-breach-a-14152