BILL BLACK: First, this is the third major breach in about two years, so they had plenty of warning that their #security, #cybersecurity, was incompetent, and they obviously didn’t fix it. Second, they now say that the breach began in May and that they didn’t detect it ’til July, while they were, as you said, stealing at least 142 million people’s worth of data, probably multiple times. Along the way, by the way, they said proudly, “Ah, but there was no breach of our core system.” Before you ever get to the core, 142 million customers are thrown under the bus. God only knows what the core is. Presumably their own personal data is what they consider the core.
Once they did discover, finally, the breach, the very first thing that happened, you mentioned part of it, which is three senior executives sold roughly $2 million-ish in shares, including the chief financial officer, who they’re now claiming wasn’t told of the breach. Now, this would be the number-two person, typically, or number-three person in the entire corporation. If they didn’t tell the senior ranks about the breach, when they discovered one of the largest and most destructive breaches in history, you know, well, you can choose to believe that. No one else does.
On top of that, there was also an immediate ... in the same time period that these senior executives were selling their stock, there was a massive increase in sales of stock options compared to the normal for Equifax, and that almost certainly was again because people had been tipped about what had happened in the breach.