Equifax will pay $19.5 million to Indiana.
The Equifax data breach, which occurred from May 2017 through July 2017, affected approximately 147 million Americans, including 3.9 million Indiana residents. It compromised Social Security numbers, dates of birth, addresses and, in some cases, driver’s license numbers and credit card information. Indiana’s lawsuit notably contained allegations about Equifax’s failure to adequately secure consumers’ information; misrepresentations related to Payment Card Industry security standards; misrepresentations about the status of Equifax’s information security; failure to notify Indiana consumers in compliance with Indiana law; and failure to maintain reasonable security procedures.
“Equifax failed to adequately protect Indiana residents whose personal information was exposed by the breach,” Attorney General Hill said. “We have worked diligently to hold Equifax accountable and achieve the best possible resolution. Equifax has agreed to correct its security deficiencies and properly safeguard consumers’ information in the future.”