According to the BBC Equifax have now announced that "limited" information on just under 400k British citizens was accessed in the breach because it was in the US due to a "process failure". So I expect they are going to be in a lot of trouble with the UK and EU not only for the breach but also because it was probably illegal for them to export data like that to the US.