Equifax Agrees to Historic $575 Million Settlement Over Massive 2017 Data Breach
Equifax pays a massive $575 million penalty to resolve government probes into its 2017 data breach that exposes the personal information of millions of consumers. The settlement includes funds for consumer restitution and mandates strict security improvements.
Equifax agrees to pay at least $575 million as part of a landmark settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau, and 50 states. This resolution addresses the massive 2017 data breach that compromises the sensitive personal information of approximately 147 million people.
The settlement requires Equifax to provide $425 million to a consumer restitution fund, which pays for credit monitoring services and compensates consumers for time and money spent recovering from the breach. The company also pays a $100 million civil penalty to the CFPB and $175 million to the states, with the total potentially reaching $700 million depending on consumer participation.
Beyond the financial penalties, the settlement mandates that Equifax implement a comprehensive information security program subject to independent audits for 20 years. The company must also offer affected consumers free credit monitoring for at least 10 years and allocate additional funds specifically to help those who experience identity theft as a result of the incident.