Equifax, the credit monitoring agency that lost personal data of 143 million US customers in a massive hack in May, has revealed that it was also the victim of an earlier breach in March. The earlier breach was serious enough for the company to notify customers, and bring in the information security firm Mandiant to investigate. But the millions of Americans whose personal data the company stockpiles to power its services are not technically customers of the company, and so it did not inform them. “Earlier this year, during the 2016 tax season, Equifax experienced a security incident involving a payroll-related service. Alongside the 143 million US consumers whose data was stolen, 400,000 UK residents also had their data illegally accessed, Equifax confirmed.

Source: The Guardian September 19, 2017 09:45 UTC