New documents provided by Equifax to senators revealed the security breach involved additional data for some customers. Hackers exploited the CVE-2017-5638 Apache Struts vulnerability. The vulnerability was fixed back in March, but the company did not update its systems. C-Level management was allowed to retire with multi-million dollar severance pays. On Monday, the company announced Jamil Farshchi as its Chief Information Security Officer (CISO) He replaces Chief Security Officer Susan Mauldin, who retired from the company after the data breach was disclosed in late 2017.”]
Source: https://securityaffairs.co/wordpress/69028/breaking-news/equifax.html