The Wall Street Journal says Equifax will pay around $700 million to settle with the Federal Trade Commission over a 2017 data breach that exposed Social Security numbers and other private information of nearly 150 million people.
The Journal, citing unnamed sources familiar with the matter, said the settlement could be announced as soon as Monday. Equifax declined to comment.
The report says the deal would resolve investigations by the FTC, the Consumer Financial Protection Bureau and most state attorneys general. It would also resolve a nationwide consumer class-action lawsuit.
Spokesmen for the FTC and the CFPB didn’t immediately return messages seeking comment Friday night.
The breach was one of the largest affecting people’s private information. Atlanta-based Equifax did not notice the attack for more than six weeks. The compromised data included Social Security numbers, birth dates, addresses, driver license numbers and credit card numbers.
The company said earlier this year that it had set aside around $700 million to cover anticipated settlements and fines.
Related: Attackers Made 9,000 Unauthorized Database Queries in Equifax Hack
Related: Former Equifax Executive Gets 4 Months for Insider Trading
Related: Equifax Was Aware of Cybersecurity Weaknesses for Years, Senate Report Says

More from Associated Press
- Democrats and Republicans Are Skeptical of US Spying Practices, an AP-NORC Poll Finds
- BBC, British Airways, Novia Scotia Among First Big-Name Victims in Global Supply-Chain Hack
- Microsoft Will Pay $20M to Settle US Charges of Illegally Collecting Children’s Data
- Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech
- Idaho Hospitals Working to Resume Full Operations After Cyberattack
- Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised
- Biden Picks New NSA Head, Key to Support of Ukraine, Defense of US Elections
- White House Unveils New Efforts to Guide Federal Research of AI
Latest News
- ‘Asylum Ambuscade’ Group Hit Thousands in Cybercrime, Espionage Campaigns
- Evidence Suggests Ransomware Group Knew About MOVEit Zero-Day Since 2021
- SaaS Ransomware Attack Hit Sharepoint Online Without Using a Compromised Endpoint
- Google Cloud Now Offering $1 Million Cryptomining Protection
- Democrats and Republicans Are Skeptical of US Spying Practices, an AP-NORC Poll Finds
- Consolidate Vendors and Products for Better Security
- Pharmaceutical Giant Eisai Takes Systems Offline Following Ransomware Attack
- Vulnerabilities in Honda eCommerce Platform Exposed Customer, Dealer Data
