Massachusetts and Indiana have reached separate settlements with Equifax over the 2017 data breach that exposed the personal information of millions of residents of both states. Massachusetts will receive $18 million to settle its claims, says Attorney General Maura Healey. Indianas attorney general says the breach affected about 3.9 million residents of that state. At the heart of the breach was Equifax’s failure to patch a vulnerability in the Apache Struts open source web application framework, according to numerous investigations.”]