Channel Watch

Equifax: A Watershed Moment in Security?

Public anger over the exposure of over 140 million consumers has been swift and harsh -- so far. Whether the backlash prompts major changes or simply dies down remains to be seen.

Massive security breaches have hit with monotonous regularity for the last decade. Consider all the major companies and organizations whose names are word-associated with data breaches: Target, Home Depot, Yahoo, MySpace, LinkedIn, eBay, U.S. Office of Personnel Management, Anthem and Heartland.

The latest brand in this rogue's gallery is Equifax Inc., one of the three major credit-reporting bureaus in the United States. The company admitted on Sept. 7 that an attack through a vulnerability in one of its Web site applications in mid-May went undiscovered until July 29, and may have resulted in the exposure of critical-identity data for up to 143 million U.S. consumers. Accessed data included names, Social Security numbers, birth dates, addresses and driver license numbers. Additionally, it included credit-card numbers for about 209,000 U.S. consumers.

This is arguably a bigger deal than all the others so far because of the central position of Equifax in modern life. As a central repository of consumer creditworthiness, the data kept by Equifax determines everything about an individual's fortunes -- eligibility for loans, credit, jobs, security clearances, apartment rentals and much more.

The case is emblematic of modern existence in another way. No customers choose to entrust their data to the care of Equifax; the company has built its business model on collecting the data independent of consumer choice.

As a result, there's little immediate recourse. Customers can't opt out of Equifax. The entire credit-check structure can't opt out, either -- Equifax is one of only three bureaus and its downfall would be disruptive. Current laws and regulations covering the bureau are somewhat limited.

Yet a powerful backlash is underway. USA Today reported that within a few days of the disclosure, there had already been 23 class action lawsuits filed. An app popped up to help consumers initiate small claims court actions in their states. Equifax stock price got pummeled. The inquiry letters from members of Congress have started arriving at corporate headquarters in Atlanta. The invitations to Congressional committee grilling sessions in Washington, D.C., are sure to follow.

Much of the attention will fade, and powerful interests will work to prevent meaningful change from occurring. It would be a shame if this security crisis is allowed to go to waste.

Speaking of security, Redmond Channel Partner magazine's parent company, 1105 Media Inc., will hold its annual Live! 360 event this Nov. 12-17 in Orlando. While the conference is incredibly broad on IT and developer content related to Microsoft infrastructure, there are a number of sessions targeted at penetration testing, Windows security and Office 365 security. Hope to see you there.

Think the Equifax hack will lead to big changes or will it get brushed off? Let me know why at [email protected].

More Columns by Scott Bekker:

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.


  • Broadcom Acquiring VMware in Third Largest Tech Deal in History

    Confirming reports that surfaced this weekend, semiconductor company Broadcom announced on Thursday that it was acquiring virtualization pioneer VMware for $61 billion.

  • Microsoft Build 2022 Keynote: AI and Cloud Take Center Stage

    Microsoft's role as builder of platforms for organizations was the theme of Tuesday's Build keynote by CEO Satya Nadella.

  • The 2022 Microsoft Product Roadmap

    Microsoft has a lot in the docket for 2022, including new products like SQL Server 2022, Exchange Subscription Edition and Visual Studio 2022 for Mac.

  • 2022 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.