Equifax Suffered a Hack Almost Five Months Earlier Than the Date It Disclosed
> One possible explanation, according to several veteran security experts consulted by Bloomberg, is that the investigation didn’t uncover evidence that data was accessed. Most data breach disclosure laws kick in only once there’s evidence that sensitive personal identifying information like social security numbers and birth dates have been taken.<p>There was one company (very well known) I know of that was breached, but their logging and general security infrastructure was so poor that they had no direct evidence that customer info was breached, so they didn't have to report the hack. They only found the intrusion due to excessive load the intruders caused on some services.<p>Customer info was certainly accessed (the attackers where everywhere), it's just there was no record of it as the records they kept where so few and far between.<p>Part of me thinks it's a pretty clever workaround to such laws.