Equifax data leak may affect up to nearly half the US population – CNET

James Martin/CNET

Hackers have hit a treasure trove of financial data from potentially up to 143 million people in the US.

Equifax, a credit reporting firm, said Thursday that it was hacked from mid-May to July, with thieves stealing names, Social Security numbers, birthdates and addresses from its customers. 

The US population is 323 million people, according to the US Census Bureau. This would mean that nearly half the country is at risk for having their personal data leaked from the Equifax breach. And the 143 million affected doesn’t include victims from around the world. 

Hackers hit the jackpot in data breaches thanks to the massive amount of sensitive information stored within a single company. Equifax’s breach is among the largest in the US, and the biggest known leak in 2017.

You can check if your data was leaked by heading to Equifax’s website. Here’s a step-by-step on how to find out if you were affected by the Equifax hack.

“This is clearly a disappointing event, and one that strikes at the heart of who we are and what we do. I deeply regret this incident,” Rick Smith, Equifax’s CEO, said in a video released Thursday.

The company learned about the breach on July 29, and announced it more than a month later. About 209,000 people have had their credit card numbers stolen, while hackers also stole documents with personal information on 182,000 victims, Equifax said in a statement to its investors.   

People in the United Kingdom and Canada have also been affected by the breach, the company said. It has since stopped the breach, and is still investigating who is behind the break-in.

“Criminals exploited a US website application vulnerability to gain access to certain files,” Equifax said in its statement. The company is working with law enforcement on the investigation.

Equifax is one of three major companies that monitor credit scores after massive data breaches. Companies like Target, Home Depot and Sony have offered free credit monitoring through Equifax after they suffered breaches. Now Equifax is offering its credit monitoring service for people affected by its own breach.

Equifax said it’s offering free identity theft protection and credit monitoring for its customers for the next year.  The company didn’t respond to requests for comment. 

“Given that financial institutions including credit card companies, banks, credit unions, retailers and lenders report the details of credit activity to Equifax, the 143 million consumers affected may not even be aware the company has this information on them,” Theresa Payton, the CEO of Fortalice Solutions, a security company, said in an email. 

Updated at 3:06 p.m. PT: To include details about Equifax and statements from an expert.

CNET Magazine: Check out a sample of the stories in CNET’s newsstand edition.

Logging Out: Welcome to the crossroads of online life and the afterlife.