https://consumerist.com/2017/09/14/equifax-says-site-vulnerability-behind-massive-breach-ftc-confirms-investigation/

It’s been a week since credit reporting agency Equifax admitted it had lost sensitive personal data for 143 million American consumers — one of the worst data breaches yet. Now, the company says it knows how the intruders got in… and it’s through a bug that was first identified six months ago.

Equifax updated its breach information page this week to identify the vulnerability malicious actors were able to use to get access to all that juicy private data.