Security Experts:

Connect with us

Hi, what are you looking for?


Management & Strategy

Equifax Ordered to Spend $1 Billion on Data Security Under Data Breach Settlement

Court Approves Equifax Data Breach Settlement

Court Approves Equifax Data Breach Settlement

On January 13, 2020, a federal court approved the proposed settlement for the class action suit filed against Equifax over the massive data breach it disclosed in September 2017.

Roughly 147 million people had their personal information compromised in the incident, which was likely the result of Equifax’s negligence, as per a Staff Report from the United States Senate’s Permanent Subcommittee on Investigations published in March last year.

The credit reporting agency announced in July 2019 it was prepared to pay up to $700 million to settle charges brought by the U.S. Federal Trade Commission (FTC), the Consumer Financial Protection Bureau (CFPB), and 50 states.

At the time, the company told customers that they could receive free credit monitoring or $125 in cash, and that they were also eligible for up to $20,000 in cash for the time spent dealing with the breach.

A couple of weeks later, the FTC warned that Equifax customers affected by the breach were unlikely to receive the full $125 cash payment, because payments would come from a fixed pot of $31 million. By late September, over 200,000 people signed a petition to force Equifax to pay more to the affected people.

This week, the settlement was approved in the U.S. District Court for the Northern District of Georgia, Atlanta Division, after only 388 people of the approximately 147 million class members directly objected to the settlement. There were also 2,770 requests for exclusion from the settlement.

As per the settlement, the credit reporting agency “will pay $380,500,000 into a fund for class benefits, attorneys’ fees, expenses, service awards, and notice and administration cost.” Attorneys have been awarded nearly $80 million.

If the amount proves insufficient, the company will pay an additional $125 million for claims for out-of-pocket losses, “and potentially $2 billion more if all 147 million class members sign up for credit monitoring,” the court’s final approval order reads (PDF).

As announced in July 2019, impacted individuals have until January 22, 2020, to submit claims for the free credit monitoring services or the alternative reimbursement compensation offered in the settlement, to receive reimbursement for Equifax services, or to receive reimbursement for out-of-pocket losses and/or time spent dealing with the data breach.

“If money remains in the fund after the initial claims period, there will be a four-year extended claims period during which class members may recover for certain out-of-pocket losses and time spent rectifying identity theft that occurs after the end of the initial claims period,” the court says.

In its final order and judgment (PDF), the court also notes that Equifax has timely informed affected individuals (via email, digital media, and other means) about the settlement, as well as state and federal officials, and that the company came up with a reasonable method to allocate the settlement benefits.

The court also revealed that Equifax has agreed “to spend a minimum of $1 billion for data security and related technology over five years and to comply with comprehensive data security requirements,” which should reduce the likelihood of a similar data breach in the future.

“Equifax’s binding financial commitment to spend $1 billion on data security and related technology substantially benefits the class because it ensures adequate funding for securing plaintiffs’ information long after the case is resolved,” the court says.

Individuals who might have been impacted by the data breach can head over to the Equifax data breach settlement website to file a claim.

“Based on the number of potentially valid claims that have been submitted to date, payments for time spent and alternative compensation of up to $125 likely will be substantially lowered and will be distributed on a proportional basis if the settlement becomes final. Depending on the number of additional valid claims filed, the amount you receive may be a small percentage of your initial claim,” Equifax notes on that website.

Related: FTC Warns Cash Option May be Small for Equifax Settlement

Related: Former Equifax Executive Gets 4 Months for Insider Trading

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.


Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.


Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Management & Strategy

SecurityWeek examines how a layoff-induced influx of experienced professionals into the job seeker market is affecting or might affect, the skills gap and recruitment...


Twenty-one cybersecurity-related M&A deals were announced in December 2022.

Management & Strategy

Industry professionals comment on the recent disruption of the Hive ransomware operation and its hacking by law enforcement.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

Management & Strategy

Tens of cybersecurity companies have announced cutting staff over the past year, in some cases significant portions of their global workforce.

CISO Conversations

SecurityWeek speaks with two leading CISOs in the aviation industry – Mitch Cyrus of Honda Aircraft, and Mark Ferguson of Bombardier.