Equifax Says It Will Hand Over NY Data Breach Info
A spokeswoman for Atlanta-based credit reporting agency Equifax said the company would comply with a demand by Secretary of State Rossana Rosado for information on a July data breach that was made public in September. The demand was made under emergency regulations issued by New York state in December.
January 05, 2018 at 04:40 PM
3 minute read
Credit reporting company Equifax said Friday that it will comply with New York regulators who are seeking information on the 2017 data breach that compromised personal information of 145.5 million Americans, including more than 8 million New Yorkers.
A spokeswoman for Atlanta-based Equifax said the company would submit information demanded by Secretary of State Rossana Rosado late last month requesting information on a July data breach that was made public in September. The breach included individuals' names, Social Security numbers, birthdates, addresses and driver's license numbers.
On Dec. 27, Rosado wrote to Equifax's interim Chief Executive Officer Paulino do Rego Barros Jr. requesting New York-specific data about consumers whose credit-card information or personally identifying information was exposed, and the number of children under the age of 16 who were affected by the breach. Rosado demanded the information in connection with an executive order issued by Gov. Andrew Cuomo on Dec. 12.
“We do intend to work with the New York Department of State to respond to their letter within the requested timeframe,” said spokeswoman Ines Gutzmer in an email to the New York Law Journal.
Response to the letter is required within 10 business days from when it was sent, Rosado wrote, meaning that a response could be due as early as Saturday if a hard copy of the letter was received on the 27th. The letter also requests a “detailed description of Equifax's core consumers or commercial credit reporting databases and how they differ from the databases that were exposed in the July 29, 2017, breach.”
Rosado is additionally requesting a summary of Equifax's plan to make the roughly 8.4 million New Yorkers “whole in the wake of the breach,” as well as a list of federal law enforcement agencies engaged in investigating the breach.
The information the Department of State is requesting from Equifax will assist the department's Division of Consumer Protection in its “ongoing efforts to investigate, mediate and/or mitigate identity theft complaints from consumers,” the letter says. The state department demanded the information in connection with emergency regulations issued by the department on Dec. 12 at the direction of the governor.
The state department probe is just one of several New York is conducting over the breach. Attorney General Eric Schneiderman's office opened up an investigation into Equifax in September. The state's Department of Financial Services, which regulates the banking insurance and other financial institutions, is also investigating the Equifax breach.
Following the Equifax breach, Cuomo proposed new, emergency regulations that would subject consumer credit reporting agencies to the same groundbreaking cybersecurity rules that the state recently enacted for bank and insurance companies. Under the proposed rules, credit reporting agencies such as Equifax, TransUnion and Experian will have to register with the Department of Financial Services beginning in February and every year thereafter. Credit reporting agencies, under Cuomo's regulations, will have to have state-approved cybersecurity plans.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllGC Pleads Guilty to Embezzling $7.4 Million From 3 Banks
Trending Stories
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250