I wholeheartedly agree that the Equifax security breach has gone way too far under the Canadian radar.  Equally bad is their response -- allegations that the website returns random answers (it returned true for a number of Canadian SINs despite the fact that Equifax has said it cannot be used for Canadians -- so either the allegations are true, or Equifax's statement is untrue; either option is bad), and the sense that they are more interested in selling their credit protection products than in atoning for their mistakes.

If it is true that equifax used "admin/admin" as their master account and password for Brazil, then there is ample evidence that they have been systematically negligent about security, possibly globally ... which would include the many Canadians whose information they have.