I'm sorry, but I don't accept this, and find it to be a rather upsetting justification of negligence. I've worked at multiple F100's, and in situations storing

I'm sorry, but I don't accept this, and find it to be a rather upsetting justification of negligence. I've worked at multiple F100's, and in situations storing data far less critical or voluminous compared to Equi, our security protocol was FAR more rigid. Google's secure data solution is a fantastic demonstration of this, and I would be taken aback if I found out they were 4 months delayed for a critical vuln in even a peripheral system. (I say this while I currently have no relationship to G, and despite being an often-critic.) Even in academia, where we absolutely were understaffed, insecure, and compromised, we stayed on top of the CVEs for the tools we used and did our damnedest to not fall behind. I fully reject that a group with the resources of Equifax could not have been more proactive. I also think it's entirely understandable to crucify this company, as NOT ONLY were they lax in their job, their failure resulted in material harm for individuals who had no meaningful choice but to participate with them. I find the idea of these "Structurally mandated protection rackets" appalling enough that I certainly would hold one of them to a harsher standard than I would a typical company. With great power etc etc.