Equifax says consumer bureau still probing hack despite report it eased off

Equifax says consumer bureau still probing hack despite report it eased off
© Getty Images

Equifax said in a federal filing on Friday that it is still under investigation by the Consumer Financial Protection Bureau (CFPB), despite reports the agency had pulled back its probe.

In a filing with the Securities and Exchange Commission (SEC), Equifax cited the CFPB among multiple federal agencies looking into the 2017 hack that exposed millions of customers’ personal information.

The CFPB circulated the Equifax filing to reporters but declined to comment further.

Equifax said that a slew of lawsuits and federal and state investigations related to the hack would “continue to adversely impact our business and results of operations.”


Hackers accessed the personal information to 147.9 million people, equal to roughly 45 percent of the U.S. population, through software flaws Equifax failed to update. The information included Social Security numbers, home addresses, driver's license information and other sensitive data.

“A number of U.S. federal, state, local and foreign governmental officials and agencies … continue to investigate events related to the 2017 cybersecurity incident,” Equifax said in the filing.

Equifax listed probes started by the CFPB, SEC, Federal Trade Commission, Justice Department and state attorneys general, along with British and Canadian regulators.

Reuters reported last month that Office of Management and Budget Director Mick MulvaneyJohn (Mick) Michael MulvaneyProtect the Military Lending Act On The Money: Midterms to shake up House finance panel | Chamber chief says US not in trade war | Mulvaney moving CFPB unit out of DC | Conservatives frustrated over big spending bills Warren suggests Mulvaney broke law by speaking to GOP donors MORE, the CFPB’s acting chief, declined to issue subpoenas and schedule interviews with top Equifax brass, effectively freezing the probe.

A Mulvaney spokesman said in February that the acting director “takes data security issues very seriously,” but declined to say whether the CFPB was investigating Equifax.

"Under his direction, the CFPB is working with our partners across government on Equifax’s data breach and response,” the spokesman said. “We are committed to enforcing the law. As policy, we do not confirm or deny enforcement or supervisory matters."

The report that Mulvaney was freezing the Equifax probe enraged Democratic lawmakers and liberal groups, who have objected to the acting director’s agenda for the CFPB. More than 30 senators demanded details about the bureau’s probe into the data breach.

The group, led by Sen. Brian SchatzBrian Emanuel SchatzOvernight Energy: Warren bill would force companies to disclose climate impacts | Green group backs Gillum in Florida gov race | Feds to open refuge near former nuke site Warren wants companies to disclose more about climate change impacts Congress just failed our nation’s veterans when it comes to medical marijuana MORE (D-Hawaii), sent a letter to the CFPB, dated Feb. 7, citing the Reuters report.

“The CFPB has a statutory mandate to participate in this process by conducting an investigation,” the senators wrote.