Equifax (2017)

Credit bureau Equifax exposed the Social Security numbers, birth dates, addresses, and credit card details of 147 million Americans due to an unpatched Apache Struts vulnerability. The breach triggered a $575 million FTC settlement — the largest ever for a privacy violation — and resulted in criminal indictments of four Chinese military officers.