Kevin BeaumontKonto zweryfikowane

Another way of looking at Equifax is they did an incredible job of keeping infrastructure that size with that much legacy secure for so long

I've worked with orgs that have nearly that much personal data and have been around as long that have never had something like this happen

The problem is there's a lot of factors to comparing companies. I mean my crab food paste company was better, but different.

This is true, which is why I refer only to the HiPAA orgs and financial corps I've worked, none that expose this % of cust data in one spot

Do US credit reference agencies have some regulatory requirements?

They would be covered under PCI-DSS if they store and transmit credit cards (and have a relationship with PCI companies)

This data isn't that however, they just collect data on people (without their consent or them paying).

Credit info includes CC numbers generally. PCI isn't just transactions