Equifax data breach was bigger than initially reported, exposing more Americans than previously revealed. Equifax says 145.5 million U.S. consumers were also impacted by the massive data breach the company disclosed last month. Credit card information for nearly 209,000 customers was also stolen, as well as personal identifying information for 182,000 Equifax consumers. The breach was due to a critical vulnerability (CVE-2017-5638) in Apache Struts 2 framework, which Apache patched over two months earlier.
Source: https://thehackernews.com/2017/10/equifax-credit-security-breach.html