https://www.vox.com/policy-and-politics/2017/9/13/16292014/equifax-credit-breach-hack-report-security

Equifax handled a disastrous hack poorly. But the core of their behavior isn’t unusual.

It took six weeks after credit reporting agency Equifax found out it had been hacked for the company to notify the 143 million customers whose private data was at risk. Following what might be the worst data breach of the past decade, such a long delay is shocking — but given the lack of regulation it’s not all that surprising.