Federal Trade Commission to investigate Equifax data breach

It was a a “massively egregious” breakdown, computer security expert says.

Associated Press

NEW YORK — The Federal Trade Commission has become the latest authority to announce an investigation into the massive security breach at credit agency Equifax.

The FTC said Thursday that it was opening an investigation into how Equifax got hacked and tens of million Americans’ personal information was either accessed or stolen. Typically the FTC does not disclose who it is investigating, but the agency said the high amount of attention in this case made it necessary.

Equifax disclosed last week that hackers were able to access the personal information of 143 million Americans, including critical things like Social Security numbers, birthdates, addresses and full legal names. Equifax is one of three major credit bureaus that keep track of the financial affairs of U.S. consumers in order help banks make decisions on lending, tracking credit card balances to payment history to court judgments. The other two main credit bureaus are TransUnion and Experian.

“In light of the intense public interest and the potential impact of this matter, I can confirm that FTC staff is investigating the Equifax data breach,” Peter Kaplan, acting director of public affairs at the FTC, said in a statement.

The FTC is not the only Washington authority looking into the breach. The Consumer Financial Protection Bureau previously announced its own investigation, and the House Financial Services Committee plans to hold hearings on the breach in early October. Politicians from both major parties are calling for additional investigations by Congress or the Department of Justice.

As the FTC looks into how Equifax was hacked, the company issued an update late Wednesday blaming the breach on a weak link that computer security experts say should have been fixed long before the break-in occurred.

Equifax said the hackers took advantage of an opening by a flaw in a piece of open-source software called Apache Struts. The problem was identified in March, and a repair known as a patch was released shortly afterward.

The intrusion into Equifax’s computer systems began in May and continued until late July. It wasn’t clear from Equifax’s disclosure whether the company applied the patch and it didn’t work, or whether its security department simply ignored the warning about the problem.

Computer security expert Nate Fick called Equifax’s failure to address the problem a “massively egregious” breakdown that should result in the ouster of the company’s top executives.

“There is no excuse for not following basic cybersecurity hygiene,” said Fick, CEO of security specialist Endgame.

Talk to us

More in Herald Business Journal

Signs from the Department of Ecology warning about contamination in the creek that runs through Powder Mill Gulch on Wednesday, March 31, 2021 in Everett, Wa. (Olivia Vanni / The Herald)
State order targets Boeing Everett plant’s polluted history

Records show a dispute over cleanup requirements for chemically tainted water. The company denies there’s a disagreement.

FILE - In this Oct. 1, 2020 file photo, traffic passes the Boeing airplane production plant, in Everett, Wash.  U.S. manufacturers expanded in March 2021 at the fastest pace in 37 years, a sign of strengthening demand as the pandemic wanes and government emergency aid flows through the economy.  (AP Photo/Elaine Thompson, file)
Boeing sees uptick in airplane orders as travel picks up

The company in April delivered 19 Maxes, three 737s for military use and seven larger widebody planes.

FILE- In this Sept. 30, 2020, file photo, a Boeing 737 Max jet, piloted by Federal Aviation Administration (FAA) chief Steve Dickson, prepares to land at Boeing Field following a test flight in Seattle. Boeing says it has informed 16 of its customers that they should address a possible electrical issue in certain 737 Max aircraft before using them further. Boeing said Friday, April 9, 2021, that the recommendation was made “to allow for verification that a sufficient ground path exists for a component of the electrical power system.” (AP Photo/Elaine Thompson, File)
Boeing: possible electrical issue in some 737 Max aircraft

The company said that the new problem was unrelated to the flight-control system.

The 214-foot tall cranes work to unload their first cargo shipments at South Terminal at the Port of Everett on Thursday, April 8, 2021 in Everett, Wa. (Olivia Vanni / The Herald)
Renovated Port of Everett terminal gets first cargo customer

The 655-foot Westwood Columbia is the first ship to call at the newly upgraded South Terminal dock.

Project Roxy is a proposed 2.8 million square foot distribution center that would be built on a 75-acre parcel at the Cascade Industrial Center. The rendering depicts the proposed project at 4620 172nd Street in Arlington from a northwest perspective.
1,000 jobs: Amazon to open distribution center in Arlington

The company is the tenant behind Project Roxy, a $355 million building at the Cascade Industrial Center.

Edmonds grocery store workers may soon earn hazard pay

Some employers are required to increase wages by $4 an hour, the city council voted Tuesday.

Aerospace supplier with Everett site files for bankruptcy

Wichita-based TECT Aerospace filed for Chapter 11 and plans to sell an Everett manufacturing facility.

Washington's Lottery ticket display. (Andrea Brown / The Herald)
Want to get lucky? Washington’s Lottery lists Top 10 stores

One of the luckiest retailers in the state was a Safeway in Everett, as measured by $1,000-plus winners.

What local firms are doing to promote diversity and equity

Here’s how some of Snohomish County’s biggest companies and organizations say they are making a difference.

Garry Clark, the new CEO of Economic Alliance Snohomish County (Kevin Clark / The Herald)
At a tough time, a new CEO leads local economic development

Garry Clark has taken the helm at Economic Alliance Snohomish County, where job one is pandemic recovery.

Kathy Coffey (left) and Courtney Wooten
Leadership Snohomish County offers racial equity conference

The fifth annual day-long Step Up: Moving Racial Equity Forward will be held online on April 30.

Boeing President Ron Woodard, fifth from left, breaks ground with Boeing officials to make way for the Boeing Commercial Airplane Group Headquarters Office Building at the Longacres Park site in Renton Wash. Wednesday, May 14, 1997. (AP Photo/Loren Callahan)
For sale: Boeing’s Commercial Airplanes headquarters in Renton

A large warehouse on the Bomarc property in Everett also is for sale.