Right, the username/password is easy to point to as an obvious problem, but surely this wasn't the _only_ security hole the hackers had to get through, right?

Right, the username/password is easy to point to as an obvious problem, but surely this wasn't the _only_ security hole the hackers had to get through, right? I can't imagine a secure database password would have prevented the hack. Though the lack of a secure database password probably hints at Equifax's attitude toward security in general.