Equifax to pay up to $700 million to settle state and federal investigations into 2017 security breach | Washington Post

A good start

"Under an agreement with the attorneys general from 48 states as well as the District of Columbia and Puerto Rico, Equifax will set aside up to $425 million to reimburse victims of the breach, including those who experienced identity theft. Equifax also will offer 10 years of credit-monitoring services to consumers who have been harmed, invest more heavily in its own cybersecurity and pay $175 million to the states themselves, officials said. They described the penalty as the most significant they’ve ever levied in response to an organization that broke state data-security laws.

Equifax also has agreed to pay an additional $100 million to settle a federal investigation at the Consumer Financial Protection Bureau, which probed the matter alongside the Federal Trade Commission, the agencies said Monday."

Equifax to pay up to $700 million to settle state and federal investigations into 2017 security breach | Washington Post