Equifax failed to patch its systems when vulnerabilities were detected and stored sensitive data on out-of-date and subpar systems