All Breaches
May 13, 2017 Verified Sensitive Record Finance

Equifax Data Breach

Between May and July 2017, Equifax Inc., one of the three largest credit reporting agencies in the world, suffered one of the most consequential cybersecurity breaches in history.

147 Million
Affected People
6
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

6
  • Social security numbers
  • Customer names
  • Dates of birth
  • Residential addresses
  • Driver's license numbers
  • Payment card information

About This Breach

Attackers exploited an unpatched remote code execution vulnerability in the Apache Struts framework (CVE-2017-5638) on the company's dispute portal, gaining access to highly sensitive personally identifiable information. The breach compromised approximately 147 million consumers, exposing Social Security numbers, dates of birth, full names, home addresses, driver's license numbers, and payment cards, leading to a historic $700 million settlement with US regulatory agencies.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information