Equifax Says It Will Hand Over NY Data Breach Info
A spokeswoman for Atlanta-based credit reporting agency Equifax said the company would comply with a demand by Secretary of State Rossana Rosado for information on a July data breach that was made public in September. The demand was made under emergency regulations issued by New York state in December.
January 05, 2018 at 04:40 PM
3 minute read
Credit reporting company Equifax said Friday that it will comply with New York regulators who are seeking information on the 2017 data breach that compromised personal information of 145.5 million Americans, including more than 8 million New Yorkers.
A spokeswoman for Atlanta-based Equifax said the company would submit information demanded by Secretary of State Rossana Rosado late last month requesting information on a July data breach that was made public in September. The breach included individuals' names, Social Security numbers, birthdates, addresses and driver's license numbers.
On Dec. 27, Rosado wrote to Equifax's interim Chief Executive Officer Paulino do Rego Barros Jr. requesting New York-specific data about consumers whose credit-card information or personally identifying information was exposed, and the number of children under the age of 16 who were affected by the breach. Rosado demanded the information in connection with an executive order issued by Gov. Andrew Cuomo on Dec. 12.
“We do intend to work with the New York Department of State to respond to their letter within the requested timeframe,” said spokeswoman Ines Gutzmer in an email to the New York Law Journal.
Response to the letter is required within 10 business days from when it was sent, Rosado wrote, meaning that a response could be due as early as Saturday if a hard copy of the letter was received on the 27th. The letter also requests a “detailed description of Equifax's core consumers or commercial credit reporting databases and how they differ from the databases that were exposed in the July 29, 2017, breach.”
Rosado is additionally requesting a summary of Equifax's plan to make the roughly 8.4 million New Yorkers “whole in the wake of the breach,” as well as a list of federal law enforcement agencies engaged in investigating the breach.
The information the Department of State is requesting from Equifax will assist the department's Division of Consumer Protection in its “ongoing efforts to investigate, mediate and/or mitigate identity theft complaints from consumers,” the letter says. The state department demanded the information in connection with emergency regulations issued by the department on Dec. 12 at the direction of the governor.
The state department probe is just one of several New York is conducting over the breach. Attorney General Eric Schneiderman's office opened up an investigation into Equifax in September. The state's Department of Financial Services, which regulates the banking insurance and other financial institutions, is also investigating the Equifax breach.
Following the Equifax breach, Cuomo proposed new, emergency regulations that would subject consumer credit reporting agencies to the same groundbreaking cybersecurity rules that the state recently enacted for bank and insurance companies. Under the proposed rules, credit reporting agencies such as Equifax, TransUnion and Experian will have to register with the Department of Financial Services beginning in February and every year thereafter. Credit reporting agencies, under Cuomo's regulations, will have to have state-approved cybersecurity plans.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllNew York Judge Steps Down After Conviction for Intoxicated Driving
American Bar Association Calls for Enforceable Supreme Court Ethics Code
Trending Stories
- 1Counterpoint: FLA Is Committed To the Success of Legal Professionals
- 2Pa. Superior Court Rules Pizza Chain Liable for Franchisee Driver's Crash
- 3New FCC Chair Hires Section 230 Critic as General Counsel
- 4Sylvia Favretto Elevated to Mysten Labs’ General Counsel
- 5Vanessa Roberts Avery Rejoins McCarter & English
Who Got The Work
J. Brugh Lower of Gibbons has entered an appearance for industrial equipment supplier Devco Corporation in a pending trademark infringement lawsuit. The suit, accusing the defendant of selling knock-off Graco products, was filed Dec. 18 in New Jersey District Court by Rivkin Radler on behalf of Graco Inc. and Graco Minnesota. The case, assigned to U.S. District Judge Zahid N. Quraishi, is 3:24-cv-11294, Graco Inc. et al v. Devco Corporation.
Who Got The Work
Rebecca Maller-Stein and Kent A. Yalowitz of Arnold & Porter Kaye Scholer have entered their appearances for Hanaco Venture Capital and its executives, Lior Prosor and David Frankel, in a pending securities lawsuit. The action, filed on Dec. 24 in New York Southern District Court by Zell, Aron & Co. on behalf of Goldeneye Advisors, accuses the defendants of negligently and fraudulently managing the plaintiff's $1 million investment. The case, assigned to U.S. District Judge Vernon S. Broderick, is 1:24-cv-09918, Goldeneye Advisors, LLC v. Hanaco Venture Capital, Ltd. et al.
Who Got The Work
Attorneys from A&O Shearman has stepped in as defense counsel for Toronto-Dominion Bank and other defendants in a pending securities class action. The suit, filed Dec. 11 in New York Southern District Court by Bleichmar Fonti & Auld, accuses the defendants of concealing the bank's 'pervasive' deficiencies in regards to its compliance with the Bank Secrecy Act and the quality of its anti-money laundering controls. The case, assigned to U.S. District Judge Arun Subramanian, is 1:24-cv-09445, Gonzalez v. The Toronto-Dominion Bank et al.
Who Got The Work
Crown Castle International, a Pennsylvania company providing shared communications infrastructure, has turned to Luke D. Wolf of Gordon Rees Scully Mansukhani to fend off a pending breach-of-contract lawsuit. The court action, filed Nov. 25 in Michigan Eastern District Court by Hooper Hathaway PC on behalf of The Town Residences LLC, accuses Crown Castle of failing to transfer approximately $30,000 in utility payments from T-Mobile in breach of a roof-top lease and assignment agreement. The case, assigned to U.S. District Judge Susan K. Declercq, is 2:24-cv-13131, The Town Residences LLC v. T-Mobile US, Inc. et al.
Who Got The Work
Wilfred P. Coronato and Daniel M. Schwartz of McCarter & English have stepped in as defense counsel to Electrolux Home Products Inc. in a pending product liability lawsuit. The court action, filed Nov. 26 in New York Eastern District Court by Poulos Lopiccolo PC and Nagel Rice LLP on behalf of David Stern, alleges that the defendant's refrigerators’ drawers and shelving repeatedly break and fall apart within months after purchase. The case, assigned to U.S. District Judge Joan M. Azrack, is 2:24-cv-08204, Stern v. Electrolux Home Products, Inc.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250