2017 Equifax UK — 13.8M records, 694K substantive
Data compromised
Names, DOB, addresses, emails, driving licenses, partial cards
Technical writeup
UK data on US servers. 13.8M UK records; 694K with substantive exposure. 14.5M names/DOB only. 15K had partial cards, passwords. FCA fined £11.16M in 2023.
Root cause
Apache Struts; US parent breach; UK data outsourced