Equifax data breach (2017): what happened and what to do
2 min read · Updated November 8, 2026
In 2017 attackers accessed Equifax systems and obtained data on about 147 million people, including names, Social Security numbers, birth dates and addresses. The company announced it in September 2017. Because the data was not published as a searchable list, assume exposure and protect your credit.
What happened
Equifax said criminals exploited a known flaw in web application software that had not been patched. They were inside the network for weeks before the company noticed in late July 2017 and disclosed it publicly in September.
The fallout included resignations, regulatory action and a settlement with US regulators and states in 2019 that included funds for affected consumers.
What was exposed
- ✓Names, Social Security numbers, birth dates and addresses.
- ✓Driver’s license numbers for some people.
- ✓About 209,000 credit card numbers and dispute documents for a smaller group, according to the company.
Were you caught up in a major breach?
Old breaches keep circulating for years. Scan your email against known breach records for a one-time $1.99.
Why it still matters
Social Security numbers do not change, so this kind of exposure creates a long-term identity risk rather than a short one. A credit bureau holds data on people who never chose to be its customer.
Email-based breach checkers will usually not flag this incident, because the data was not widely dumped. That makes assuming exposure, rather than waiting for a match, the safer approach for US residents with credit files.
What to do
- ✓Check your email address to see whether it appears in known breach records.
- ✓Change any password you used on the affected service, and anywhere you reused it.
- ✓Turn on two-factor authentication, starting with email and financial accounts.
- ✓Be careful with unexpected messages that mention the service.
- ✓Place a free credit freeze with the major credit bureaus and review your credit reports regularly.
Frequently asked questions
Will a breach checker show the Equifax breach?+
Probably not. The data was not published as a searchable list, so a clean result does not rule out exposure.
What is a credit freeze?+
A free tool that stops new credit being opened in your name until you lift it, which blocks most identity-theft account openings.
Was email data the focus?+
No. The sensitive items were Social Security numbers and birth dates, which is why the response focuses on credit protection.
Stop guessing. Check your email in seconds.
The Leakill scan looks for your email address in known breach records and delivers a detailed report: the incidents, dates, sources, the kinds of data involved and practical next steps. It is a one-time $1.99 payment, not a subscription.
A breach match is a warning signal, not proof that someone has access to your account today. No public database covers every breach, so a clean result lowers risk without guaranteeing safety.