That's not a valid excuse. The job of a leader is in part to identify and mitigate risks, or hire a competent person do it for you, while still being responsib

That's not a valid excuse. The job of a leader is in part to identify and mitigate risks, or hire a competent person do it for you, while still being responsible for it. The fact that risks of these magnitude were being mitigated by a single lone guy is a leadership issue. Then, the problem was not only in the risk mitigation but also in the handling of the incident as well. That's again on the leadership. Then, the exfiltrated information is not secondary to Equifax's business. It's the core of their business. It's not that they were Target, for instance, where the core of their business is retail... the proper handling of that information was Equifax's only goddamn job.