Back in March, remote desktop specialist Citrix admitted hackers had romped through its core systems, and had purloined internal business documents. Now we're finding out the intrusion was much worse than first thought. A letter [PDF] to the California Attorney General this week, required by law following a hack of this nature …

Credit-rating monitor Equifax ignored years of warnings and red flags before it was thoroughly ransacked in 2017 by hackers, who made off with the personal information of roughly 150 million Americans, Brits, and Canadians, according to another congressional probe. An investigation [PDF] by the US Senate Committee on Homeland …

A US judge has given the go-ahead for a set of consolidated lawsuits against credit agency Equifax regarding its 2017 mega-hack. In a series of orders handed down in a Georgia federal district court on Monday, the evocatively named Judge Thomas Thrash Jr said that legal challenges from payment card issuers and ordinary …

UpdatedA US Congressional report outlining the breakdowns that led to the 2017 theft of 148 million personal records from Equifax has revealed a stunning catalog of failure. The 96-page report (PDF) from the House's Committee of Oversight and Government Reform found that the 2017 network breach could have easily been prevented had …

An Equifax executive – who knew the biz had been hacked before it was made public and banked over $75,000 in stock trades using this inside knowledge – has avoided jail. Sudhakar Reddy Bonthu, formerly a software product development manager for Equifax’s Global Consumer Services team, admitted to learning that hackers have …

UpdatedThe UK's privacy watchdog wants to fine Equifax £500,000 ($660,000) after hackers siphoned off 15 million Brits' info from the credit-score agency's databases. Or in other words, three pence for each of the affected British citizens. The fine could have been much larger had it fallen under Europe's GDPR. However, the security …

AnalysisIf Equifax's mother-of-all-security-disasters last year underlined one thing, it was that big companies think they can weather just about anything cybercriminals – and regulators – can throw at them. One unpatched web server, 147 million mostly US customer records swiped, and a political beating that should pulverise a company …

Another critical security hole has been found in Apache Struts 2, requiring an immediate update. The vulnerability – CVE-2018-11776 – affects core code and allows miscreants to pull off remote code execution against vulnerable servers and websites. It affects all versions of Struts 2, the popular open-source framework for Java …

A former Equifax software engineering manager was today charged with insider trading – and has promised to pay back his alleged ill-gotten gains. Meanwhile, eight US states decided to let the biz off with just a slapped wrist instead of a fine after it was thoroughly hacked last year. The credit agency's computer security …

Equifax has published yet more details on the personal records and sensitive information stolen by miscreants after they hacked its databases in 2017. The good news: the number of individuals affected by the network intrusion hasn't increased from the 146.6 million Equifax previously announced, but extra types of records …

The Equifax mega-hack has cost the credit reporting agency well north of $200m to date, according to a financial filing for calendar Q1. In September 2017, Equifax 'fessed up to a breach that exposed the data of more than 145 million people. The cost of the breach in the latest full quarter ended 31 March was $68.7m, taking …

Some of the 15 million Britons affected by the Equifax mega-hack are only now receiving letters notifying them that they were affected by the breach, eight months after the event. As we reported in September 2017, Equifax confessed to having been hacked, upping the number of affected people in the following weeks to a 145 …

A former Equifax exec was today charged with insider trading for offloading almost $1m of shares before the company went public about the scandalous mass data breach. The global credit reporting agency was hacked in May '17, which exposed the personal data of 148 million people. The firm discovered the breach at the end of …

Embattled credit-reporting company Equifax has done some data crunching and discovered another 2.4 million people that had their information slurped by hackers. The biz, which was subject to one of the biggest data breaches in US history last May, has already had to revise up the number of affected individuals. The total …

Last year, Equifax admitted hackers stole sensitive personal records on 145 million Americans and hundreds of thousands in the UK and Canada. The outfit already said cyber-crooks "primarily" took names, social security numbers, birth dates, home addresses, credit-score dispute forms, and, in some instances, credit card numbers …

New legislation introduced in the US Senate by Elizabeth Warren (D-MA) and Mark Warner (D-VA) would result in credit reporting agencies being slapped with stiff fines if they play fast and loose with data security. The Data Breach Prevention and Compensation Act [PDF] would impose a mandatory $100 fine per person affected on …

Equifax's latest financials lay bare the costly fallout from the embarrassing security breach that exposed 143 million customers' privates in the US and 15.2 million records in the UK. Calendar Q3 numbers for the three months ended 30 September - the latter being the same month the company 'fessed up to the mega leak - include …

Poor Marissa Mayer. After selling off Yahoo! and floating away on her golden parachute, she must have been looking for a nice rest. But US Congress wanted her to explain how every single user account on the portal got hacked. On Wednesday, she testified before the Senate Committee on Commerce, Science, and Transportation on …