Equifax Data Breach Consumer Class Action
Case Overview
In September 2017, Equifax — one of the three largest consumer credit reporting agencies in the United States — disclosed that hackers had exploited a known vulnerability in the Apache Struts web application framework to steal the sensitive personal and financial data of approximately 147 million Americans. The stolen data included Social Security numbers, birth dates, home addresses, driver's license numbers, and approximately 209,000 credit card numbers. Security investigators later revealed that the breach persisted for 78 days before discovery, and that Equifax had failed to apply a critical security patch that had been available for months prior to the breach.
Equifax agreed to a landmark $700 million settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau, and 50 U.S. states and territories in 2019 — at the time the largest data breach settlement in history. The settlement established a $425 million consumer restitution fund to provide affected individuals with free credit monitoring, identity restoration services, and cash compensation for time spent dealing with the breach. The FTC notably had to revise settlement terms after an overwhelming initial claims response depleted the original cash fund. The case remains a defining moment in U.S. data privacy history, prompting sweeping calls for federal data breach legislation and dramatically increasing public awareness of credit reporting industry practices.
Who May Qualify
U.S. residents whose personal information was compromised in the Equifax data breach, which affected individuals whose data was on file with Equifax prior to the breach. The claims deadline has passed.
Frequently Asked Questions
Can I sue Equifax for the data breach?
The deadline to file claims in the Equifax data breach class action has passed (January 22, 2020). However, if you were affected by the breach and previously submitted a valid claim, you may be entitled to compensation from the $700 million settlement. Check the official settlement website to see if your claim was approved.
How much money can I get from the Equifax settlement?
The total settlement amount is $700 million, but the actual payout per person depends on how many valid claims were submitted and approved. You can receive either cash compensation or free credit monitoring services. Visit the settlement administrator's website with your claim number to check your award status.
Was my information affected in the Equifax breach?
The 2017 Equifax breach compromised approximately 147 million Americans' data, including Social Security numbers, birthdates, addresses, driver's licenses, and credit card information. If you had a credit file with Equifax before mid-2017, your information was likely affected. You can check Equifax's dedicated breach website to confirm your exposure.