Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Monday October 09 2017, @02:27AM   Printer-friendly
from the someone-was-bound-to-have-said-it dept.

From Consumerist,

A company that supplies stock market indexes reportedly warned investors in August 2016 that Equifax, one of the nation's three major credit bureaus, appeared to be ill-equipped to fight off a sophisticated cyber attack.

The Wall Street Journal writes that MSCI, which provides a number of indices for tracking and predicting the behavior of the stock market, concluded last summer that Equifax was no longer a company investors could reasonably rely on to keep its data safe.

MSCI has a group of stock indices that take into account a company's economic, social, and governance (ESG) factors. Prior to last summer, Equifax had been included in these indices, but then MSCI determined that Equifax had failed to perform regular cybersecurity audits, train its employees to recognize risks associated with an attack, or have an emergency response plan in the case of a breach.

At first, Equifax remained on the MSCI ESG Leaders index, but with a 0/10 score for privacy and data. (Competing credit bureaus TransUnion and Experian scored a 4.9 and 6.9, respectively.) Then, in Nov. 2016, Equifax was removed from this index over concerns about data security.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Insightful) by Anonymous Coward on Monday October 09 2017, @11:06AM

    by Anonymous Coward on Monday October 09 2017, @11:06AM (#579234)

    Caveat Emptor is the only regulation you can actually trust to produce a working society

    This story is saying it was publicly known from at least August 2016 that Equifax had poor security. Yet the response Equifax's customers (prospective creditors) was underwhelming.

    anyone who is interested in living [in] a society that is actually civilized should be interested in building a society around voluntary interaction.

    The people whose information was exfiltrated, who stand to be harmed most, weren't interacting directly with Equifax.

    The story about the IRS choosing Equifax for a no-bid contract after the data theft was announced supports your point. I don't see how this story does.

    Starting Score:    0  points
    Moderation   +3  
       Insightful=2, Interesting=1, Total=3
    Extra 'Insightful' Modifier   0  

    Total Score:   3