Equifax finally publishes a tally of what got breached when it left 146.6 million credit files unsecured

Ever since the news of the Equifax breach broke last September, we've been waiting for the company to publish an authoritative tally of what, exactly, got breached.


Equifax has finally submitted a filing to the SEC with the numbers:

Of the 146.6 million individuals affected by the breach:

*
145.5 million had Social Security numbers exposed.

*
99 million had address information exposed.

*
27.3 million had gender information exposed.

*
20.3 million had phone numbers exposed.

*
17.6 million had driver's license numbers exposed.

*
1.8 million had email addresses exposed.

*
209,000 had credit card numbers exposed.

*
97,500 had Tax Identification numbers exposed.

*
27,000 had the state of their driver's license exposed.

As well as:

* 38,000 driver's licenses

*
12,000 Social Security and Taxpayer ID cards

*
3,200 passports and passport cards

*
3,000 other documents, including military and state IDs and resident alien cards.

Equifax breach exposed millions of driver’s licenses, phone numbers, emails [Sean Gallagher/Ars Technica]


EQUIFAX’S STATEMENT FOR THE RECORD

REGARDING THE EXTENT OF THE CYBERSECURITY INCIDENT

ANNOUNCED ON SEPTEMBER 7, 2017 [SEC]