Equifax was more negligent. No doubt. EQ left default credentials intact on a public facing database. 23 was cred stuffed, which is still not good, but not the

Equifax was more negligent. No doubt. EQ left default credentials intact on a public facing database. 23 was cred stuffed, which is still not good, but not the same level of negligence. US laws are a sad tragedy of the rich fucking the not rich harder and harder and harder every decade.