I'm skeptical of the claim that only a nation-state could have done this. Too lazy to look it up now, but I could swear that it was publicized that they were pw

I'm skeptical of the claim that only a nation-state could have done this. Too lazy to look it up now, but I could swear that it was publicized that they were pwned using vulnerabilities that had been publicly known and patched for months? That would be extreme negligence no matter how you slice it. > Technically I don't "own" the data that Equifax has about me. This itself is a big part of the problem. It should absolutely be illegal for companies to hold sensitive info like my SS# without my permission.