CORRECTED-British MP asks why Equifax delayed notifying UK data hack victims

CORRECTED-British MP asks why Equifax delayed notifying UK data hack victims
From Reuters - October 12, 2017

(This version of the October 11 story corrects number of citizens affected in paragraph 1)

By Eric Auchard

LONDON (Reuters) - The powerful chair of Britains parliamentary treasury committee demanded on Wednesday that U.S. credit reporting agency Equifaxexplain why it has taken more than a month to notify users of a massive data breach affecting more than 15 million records and nearly 700,000 UK citizens.

Nicky Morgan, chair of the House of Commons Treasury Committee, also wrote to Britains financial regulator to determine whether Equifax had violated terms of its license to operate in the country and whether the regulator had the power to compel the company to provide compensation to UK consumers.

On Tuesday, Equifax revealed that 15.2 million records on British citizens were involved in the breach, including sensitive data on what it said were 693,665 individuals, for whom credit protection services were offered. The compromised credit information dated from 2011 to 2016, the company said.

The UK data accessed by unknown hackers included credit accounts, user credentials, partial credit card details and driver license numbers. The remaining 14.5 million records contained names and birth dates of UK consumers were potentially compromised, the company disclosed.

More than a month ago, Equifax first revealed it had been the target of a massive data breach which hit around 143 million people, mostly in the United States. It acknowledged at the time an unspecified number of Canadian and UK residents were hit. It later updated the total number of victims to 145.5 million.

Equifax did not respond to requests for further comment.



Continue reading at Reuters »