
Cyber security wasn’t a priority at Equifax [EFX] before a massive data breach the credit reporting company disclosed in September 2017 and it lacked a sustained and comprehensive effort to fix known vulnerabilities, a bipartisan Senate investigative panel says in a new report. “Equifax had no standalone written corporate policy governing the patching of known cyber vulnerabilities until 2015,” says the report by the Permanent Subcommittee on Investigations, which is under the Senate Homeland Security and Governmental Affairs Committee. It…