Equifax CEO to Congress: Not Sure We Are Encrypting Data
Encryption wouldn't have mattered here. To a pretty good first approximation, none of the "encryption" done at scale at any Fortune 500 company in the US is more than a speed bump for attackers. Unless you're using moon math --- nobody is --- enterprise backend encryption is hamstrung by the fact that you're keeping the data because <i>automated business processes need to use it</i>, which means automated systems need to decrypt it.