Equifax data breach has been linked to a missed patch on a key web software component, which has been available for some time, but not applied by Equifax. Most organizations understand the importance of patching their systems, but are reluctant to schedule downtime for patching. Even if a leading edge organization finds a way to stay current, they still have trouble keeping up with the zero day vulnerabilities and those that are, as yet, undisclosed. An estimated 145 million consumers were affected by the breach, with data on 145 million being disclosed.”]
Source: https://www.csoonline.com/article/3230970/patch-management-not-for-the-faint-of-heart.html