Equifax (2017)

A preventable Apache Struts vulnerability at Equifax allowed hackers to steal 147 million Americans’ Social Security numbers, birth dates, and credit histories in 2017. That victim count is 49% higher than the American victims in the National Public Data breach, despite the latter having 20x more total records. The breach cost Equifax over $1.4 billion in settlements, fines, and remedial security upgrades, and directly led to sweeping credit monitoring reforms.