> Mandiant, the security consulting firm hired by Equifax to investigate the breach, said in a report distributed to Equifax clients on Sept. 19 that it didn't

> Mandiant, the security consulting firm hired by Equifax to investigate the breach, said in a report distributed to Equifax clients on Sept. 19 that it didn't have enough data to identify either the attackers or their country of origin. Isn't it possible that with the incredible bounty of state-power hacking tools floating around the web that it's just a criminal organization? Or are we trying to paint a cold-cyber-war narrative to put Equifax in a sympathetic light?