If #2 is what happened, they aren't acting in their own interests by saying they were hacked. If they were hacked, that means 3rd parties have the data. If they

If #2 is what happened, they aren't acting in their own interests by saying they were hacked. If they were hacked, that means 3rd parties have the data. If they merely deleted a database, that implies the info is gone and nobody has it. Surreptitiously recreating a database? They can get a list of SSNs from the government, what is a user going to add to that? One of their addresses? All of their previous financial activity? What do you think the database contains? Not to mention the idea that Equifax doesn't have backups.