VISHNU_KV / Pixabay

While cyberattacks and data breaches have becoming increasingly prominent over the last several years, with hackers setting their sights on bigger targets – and doing so successfully – this month saw an enormous shift on that front when Equifax announced that it, too, was the latest victim of such a breach.

Along with TransUnion and Experian, Equifax is one of the country’s three largest and predominant credit reporting agencies, effectively making it a treasure trove of personally identifying information running the gamut of names, addresses, Social Security Numbers and credit scores. In other words, all the ingredients for identity theft. And, with the personal data of potentially up to 143 million Americans now suddenly exposed, Massachusetts Attorney General Maura Healey stepped forward as the first to file a state lawsuit over the Equifax breach.

Healey, who called the breach “the most brazen failure to protect consumer data we have ever seen” in an official statement, announced on September 12 – five days after the breach was first reported – that the commonwealth would be taking Equifax to court over its failure to “maintain the appropriate safeguards to protect consumer data,” in violation of Massachusetts’ state consumer protection and privacy laws.

In the days since the company first announced that they had suffered a previously unreported data breach spanning from May to July of this year, Equifax has faced no shortage of criticism. Of particular note is how the company’s Argentina website reportedly protected countless consumer accounts with a username/password combo that was simply “admin” for both. With cybersecurity like that, which can only be described as amateurish at best, the real wonder isn’t how Equifax was breached at all, but how it made it this long without being compromised.

With members of Congress calling for hearings, the Federal Trade Commission opening an investigation and class-action lawsuits springing up all over the country, Massachusetts may be the first state to formally file suit against Equifax, but it certainly won’t be the last.