Equifax fined £11 million by financial watchdog over 2017 cyber attack

13 October 2023, 11:54

The headquarters of Equifax in Atlanta
Equifax Inc. Picture: PA

The credit rating giant failed to keep its customers safe during an ‘entirely preventable’ cybersecurity breach, the Financial Conduct Authority said.

The UK’s financial watchdog has fined Equifax £11 million for its role in one of the largest cyber attacks, which affected more than 13 million British consumers in 2017.

The credit rating giant failed to keep its customers safe during an “entirely preventable” cybersecurity breach, the Financial Conduct Authority (FCA) said.

The hack happened after Equifax’s UK arm outsourced customer data to its owner based in the US, Equifax Inc.

The company collects information on customers and produces credit reports, which can be used by lenders to assess whether to approve financing for things like mortgages, cars and credit cards.

Hackers were able to access information, from people’s names, dates of birth and phone numbers to partially exposed credit card details and home addresses.

The attack exposed millions of UK consumers to the risk of financial crime, the FCA said.

The regulator said Equifax failed to manage and monitor the data in the hands of its US owner, which it said had known weaknesses in its data security systems.

It said the firm only found out about the hack about five minutes before it was announced by the American owner, meaning it was unable to cope with an influx of customer concerns and complaints.

FCA sign
The FCA  said regulated firms are ‘on the hook’ over customer security (Alamy/PA)

Therese Chambers, the FCA’s joint executive director of enforcement and market oversight, said: “Financial firms hold data on customers that is highly attractive to criminals. They have a duty to keep it safe and Equifax failed to do so.

“They compounded this failure by the ways they mishandled their response to the data breach.

“Regulated firms are on the hook, regardless of whether they outsource or not.”

Equifax said it has invested heavily in its cybersecurity systems since the hack.

Patricio Remon, Equifax’s president for Europe, said: “Equifax has co-operated with the FCA fully throughout this long-running investigation and has been recognised by the FCA for that co-operation, our transformation programme and the voluntary consumer redress exercise we implemented after the incident.

“Since the cyber attack against our company six years ago, we have invested over 1.5 billion US dollars (£1.2 billion) in a security and technology transformation.

“Few companies have invested more time and resources than Equifax to ensure that consumers’ information is protected.”

By Press Association

More Technology News

See more More Technology News

Online Fraud Charter

Top tech firms sign new Government Charter to crack down on online fraud

Microsoft offices

Microsoft to invest £2.5bn in UK to boost AI plans

Musk accused companies like Apple and Disney of engaging in the ad boycott and trying to blackmail him.

Elon Musk launches expletive rant at advertisers who boycotted his social media platform X

Technology stock

Apple names its App Store apps of the year


Generative AI ‘helping criminals create more sophisticated cyber attacks’

Someone using a mobile phone

Virgin Media O2 expands national databank scheme for Christmas

Social media apps on a smartphone

Too much social media linked to harmful behaviours in teenagers, study suggests

Bank accounts

New data powers ‘could allow DWP to snoop on pensioners’ bank accounts’

AI image generators

Teach children about using AI at secondary school, IT professionals say

Child with a laptop

Social media sites failing to stop the spread of suicide content, charity says

Technology Stock

Public warnings about AI misinformation needed before election, peers told

Smartphone with Adobe logo on the screen

£16bn Adobe takeover could harm competition in digital design market – watchdog

Person using a laptop

No ‘smoking gun’ linking mental health harm and the internet – study

ChatGPT website

Young people the biggest users of generative AI, Ofcom study shows

Glenn Weinstein

Software firm Cloudsmith announces £8.8m investment

Online abuse AI algorithm

AI image generators ‘being used by children to create indecent images’