Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The 2017 Equifax data breach began when attackers exploited an unpatched vulnerability in the company’s online dispute portal. About 147 million people were affected, but the information exposed varied by person. The settlement claim deadline has passed; the FTC says eligible affected consumers can still access identity restoration through January 2029, and all U.S. consumers can get seven free Equifax credit reports a year through 2026.

What happened in the Equifax data breach?

Attackers exploited a software vulnerability in Equifax’s online dispute portal, then used access to reach other resources on the company’s network. The U.S. Government Accountability Office (GAO) says Equifax administrators discovered unauthorized access in July 2017. Equifax publicly announced the breach on September 7, 2017.

The vulnerability was in software used to build Java web applications. According to the FTC’s account of its complaint, US-CERT warned Equifax and other organizations about it in March 2017. Equifax’s security team received the alert on March 9 and directed staff to apply a patch within 48 hours, but a scan failed to identify the vulnerable component in the company’s Automated Consumer Interview System. The FTC described suspicious traffic detection in late July, after which the portal was taken offline and a forensic investigation found the vulnerability had been exploited.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Equifax initially reported that 143 million U.S. consumers were affected. Its later analysis added 2.4 million people whose names and partial driver’s license information had not been included in the original count. The timeline and account of the vulnerability are described by the GAO, the FTC, and Equifax’s statement filed with the SEC.

#1 Best Overall
Veltec ID Protector Ink Roller - Identity Theft Protection Roller Stamp Set (Blue, Stamp+3 Refills)
  • SHIELD YOUR PRIVACY WITH THE ID DEFENDER ROLLER STAMP: Tired of worrying about your personal information falling into the wrong hands? The ID Defender Roller Stamp offers a simple yet effective solution. With a unique wide camouflage pattern, it quickly and easily conceals sensitive data on a variety of surfaces.
  • PRIVACY PROTECTION: useful not only as an ADDRESS BLOCKER or ID POLICE, but also keeps away preying eyes from invoices, authority documents, checks, bank statements and many more.
  • SIMPLE TO USE: Just remove the cover and swipe. The wide swipe makes it easy to cover sensitive information.
  • VERSATILE APPLICATION: Ideal for a variety of documents, including contracts, court documents, shipping labels, tax returns and more.
  • LONG-LASTING INK: The high-quality ink works on both glossy and standard paper and provides up to 330 feet of coverage.

Who was affected, and what information was exposed?

The FTC used an estimate of approximately 147 million affected people in its 2019 settlement announcement. The GAO reported that personal information for at least 145.5 million individuals was accessed. These are approximate and minimum counts from different sources, not a claim that every affected person had the same information exposed.

Equifax’s 2018 SEC-filed statement gives these counts for data elements in its analysis:

Rank #2
Nezyo 2 Pack Identity Protection Roller Stamp 4 Pack Refill Ink,Yellow
  • Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
  • Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
  • Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
  • Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
  • How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
Information Reported count Source and date
Social Security numbers 145.5 million Equifax statement filed with the SEC, 2018
Names and birth dates 146.6 million Equifax statement filed with the SEC, 2018
Addresses Approximately 99 million Equifax statement filed with the SEC, 2018
Payment card numbers and expiration dates 209,000 Equifax statement filed with the SEC, 2018
Dispute documents containing personal information Approximately 182,000 people Equifax statement filed with the SEC, 2018

Some people also had driver’s license information exposed. The SEC-filed statement describes limited information for certain residents of the United Kingdom and Canada as well. Its data categories overlap; the figures are counts of particular information elements, not additional people to add to the overall affected-population estimate. See Equifax’s SEC-filed statement for its account of the data exposed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To check whether you were identified as affected, use the lookup tool on the FTC’s Equifax settlement page. The overall breach estimate alone cannot tell you which specific information about an individual was accessed.

Rank #3
Vantamo Identity Theft Protection Roller Stamp for Hiding Sensitive Information, Wide Confidential Stamp with 6 Ink Refill, Security Stamp Roller for Identity Theft Prevention, Classy Blue
  • The id defender roller is the ultimate tool for guarding your personal data at home or in the office. Prevent identity theft by quickly masking sensitive information on mail, documents, or labels, giving you confidence that your details remain private and secure with Vantamo id theft protection.
  • Effortlessly block out sensitive text with the label cover up identity protection, designed for quick, one-handed use. No more scraping off all shipping labels or doing a lot of swipes with a marker! Even first-time users will find the process intuitive and straightforward, making it a practical label eraser roller for anyone!
  • Vantamo wide rolling privacy marker is fully refillable and arrives with 6 ink refill for self inking stamps ensuring lasting performance. Don't run out when you need it the most. The ink is specially designed for hiding information.
  • Our address blackout stamp not only protects your privacy but also helps the environment. After using the roller on your documents, the paper is ready to be safely recycled, making this address eraser a smart alternative to shredding or tossing documents.
  • Here at Vantamo, we are creating products that people love! We are committed to providing excellent customer service on every black out stamp. If you ever have questions or concerns, our team is here to help, ensuring your id defender delivers reliable protection and peace of mind every time.

What was the impact?

Names, birth dates, Social Security numbers, addresses, and other identifiers can be used in attempts at identity theft or fraud. That risk was the reason the settlement included consumer relief and why the FTC continues to direct eligible people to identity restoration services.

Being among the affected population does not establish that a person experienced identity theft, lost money, or had a later fraud incident caused by this breach. The cited primary sources do not give one aggregate total for realized consumer losses across all affected people.

Rank #4
Mimorou 4 Pack ID Security Roller Stamps, 5 Inks, Yellow
  • Personal Information Protection: there are 4 pieces of address blocker roller stamps in 2 different sizes, and 5 pieces of 1.5 ml inks, a total of 9 pieces. Mainly applied to hide information such as social security numbers, bank statements, billing addresses, shipping addresses, tax documents and so on, protecting your personal information
  • Re Inking Unlimitedly: the information blocker stamp can cover information of the length about 100 meters. And each security stamper roller has an oil hole, so you don't have to worry about you having to throw away the roller stamps when the ink runs out. They can be refilled with oil for repeated use, saving time and energy
  • Cover Fast: our identity protection rollers come in 2 different sizes, and you can choose different sizes according to different areas of information to cover large amounts of private information in a fast and clean way, avoiding identity theft and rejecting privacy disclosure harassment
  • Easy to Use: just remove the lid on the ID stamp blocker roller and open it, and then gently slide it on the place where the information needs to be covered. It is suitable for most ordinary paper with black words, and can protect your personal privacy in time
  • Save Time and Energy: compared with the shredder, the personal confidential stamp has a small size, easy to carry, can be applied anytime and anywhere. Compared to the marker, it covers a larger area and can be quickly covered with a single swipe. There is no need to worry about whether you can not protect your privacy in time

Why did the breach happen?

The GAO grouped contributing weaknesses into four broad areas: identifying vulnerabilities, detecting intrusions, limiting access between systems, and governing data securely. The FTC’s 2019 settlement announcement described allegations that Equifax failed to ensure a critical patch was installed, kept administrative credentials in plain text, did not adequately segment database servers, and lacked robust intrusion detection for legacy databases. These are the GAO’s findings and the FTC’s allegations and settlement terms, not a claim of independent firsthand reporting.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The government accounts are available in the GAO report and the FTC settlement announcement.

Best Value
Sale
Mimorou 4 Pack ID Security Roller Stamps, 5 Inks, Red, Yellow, Blue, Green
  • Personal Information Protection: there are 4 pieces of address blocker roller stamps in 2 different sizes, and 5 pieces of 1.5 ml inks, a total of 9 pieces. Mainly applied to hide information such as social security numbers, bank statements, billing addresses, shipping addresses, tax documents and so on, protecting your personal information
  • Re Inking Unlimitedly: the information blocker stamp can cover information of the length about 100 meters. And each security stamper roller has an oil hole, so you don't have to worry about you having to throw away the roller stamps when the ink runs out. They can be refilled with oil for repeated use, saving time and energy
  • Cover Fast: our identity protection rollers come in 2 different sizes, and you can choose different sizes according to different areas of information to cover large amounts of private information in a fast and clean way, avoiding identity theft and rejecting privacy disclosure harassment
  • Easy to Use: just remove the lid on the ID stamp blocker roller and open it, and then gently slide it on the place where the information needs to be covered. It is suitable for most ordinary paper with black words, and can protect your personal privacy in time
  • Save Time and Energy: compared with the shredder, the personal confidential stamp has a small size, easy to carry, can be applied anytime and anywhere. Compared to the marker, it covers a larger area and can be quickly covered with a single swipe. There is no need to worry about whether you can not protect your privacy in time
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What did the Equifax settlement cover?

In July 2019, the FTC announced a global settlement involving the FTC, the Consumer Financial Protection Bureau (CFPB), and 50 states and territories. The announced amount was at least $575 million and could reach $700 million. The FTC described the terms as including a $300 million consumer fund, up to $125 million more if needed, $175 million for states and territories listed in the release, and a $100 million CFPB civil penalty. Equifax was also required to implement a comprehensive information security program.

These are the terms announced in 2019; the consumer claim period is no longer open. The FTC’s announcement explains the settlement components and security obligations.

What can affected consumers do now?

The FTC’s settlement page lists the remaining benefits and their limits:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Check whether you were affected: Use the lookup tool on the FTC’s settlement page.
  • Use identity restoration if eligible: People affected by the breach who discover misuse can access free identity restoration through January 2029, even if they did not file a claim for other settlement benefits.
  • Get free Equifax credit reports: All U.S. consumers can obtain seven free Equifax credit reports per year through 2026 at AnnualCreditReport.com.
  • Do not try to file a late claim: The settlement claim deadline was January 22, 2024.

The FTC’s page is the source for current eligibility details and dates; check it for the latest instructions before using a benefit.

Equifax data breach: key dates

Date What happened
March 2017 US-CERT warned about the software vulnerability; Equifax received the alert on March 9.
July 2017 Equifax discovered unauthorized access to the online dispute portal and began investigating.
September 7, 2017 Equifax publicly announced the breach, initially identifying 143 million U.S. consumers.
March 2018 Equifax’s later analysis added 2.4 million people with names and partial driver’s license information.
July 2019 The FTC, CFPB, and state settlement was announced.
January 22, 2024 Deadline to file settlement claims.

Sources for the historical dates include the FTC’s chronology based on its complaint, the GAO report, Equifax’s SEC-filed statement, and the FTC settlement announcement. Current benefit dates are listed on the FTC settlement page.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.