Equifax’s press release today, announcing the conclusion of Mandiant’s investigation:
The completed review determined that approximately 2.5 million additional U.S. consumers were potentially impacted, for a total of 145.5 million. Mandiant did not identify any evidence of additional or new attacker activity or any access to new databases or tables. Instead, this additional population of consumers was confirmed during Mandiant’s completion of the remaining investigative tasks and quality assurance procedures built into the investigative process.
The relatively good news is that the number of Canadians impacted is far lower than previously estimated.
Additionally, it strikes me as slimy and opportunistic of Equifax to announce this while news of the worst mass shooting in post-war American history is on everyone’s mind. Their inability to adequately secure even more Americans’ information can wait until people have time to mourn, grieve, and — over time — find any means of turning their pain into ideas and policies that make the country a better place to live.