Printify
EXHIBIT 0033 — EQUIFAX
EXHIBIT 0033 — EQUIFAX
Couldn't load pickup availability
The patch had been out for two months. The thing watching the door had been switched off for far longer.
The vulnerability was CVE-2017-5638, a flaw in Apache Struts that let a crafted web request run commands on the server. It was disclosed, with a patch, on 7 March 2017. Equifax ran an internet-facing application called ACIS on a version of Struts that had the hole, did not apply the fix, and the attackers came through it in the middle of May.
They then had access to the personal data of about 147.9 million people: names, dates of birth, addresses, Social Security numbers, driver's licence numbers, and for some, credit card numbers. That is not customers who signed up for anything. It is roughly half the adult population of the United States, whose data Equifax held because it is a credit bureau and that is its business.
The part that turns a bad patch cycle into a catastrophe is what happened next, which is nothing. Equifax had a device that inspected encrypted network traffic looking for exactly this kind of exfiltration. It relied on a certificate to decrypt and read the traffic, and that certificate had expired. While it was expired, the traffic passed uninspected, and the attackers moved data out for weeks without tripping a single alarm.
The intrusion was discovered only when someone renewed the certificate. The instant the monitor could see again, it saw the suspicious traffic, and Equifax pulled the application offline the same day.
How long the certificate had been expired is genuinely disputed. A congressional report put it at around nineteen months; Equifax told government investigators it was closer to ten. Either way it was expired before the Struts patch was ever released, which is the only figure that matters: the camera was off before the door was even known to be unlocked.
The settlement with the FTC, the CFPB and the states, in July 2019, was at least $575 million and up to $700 million, the largest data-breach settlement in US history at the time.
They patched the door eventually. Nobody had checked whether the camera was recording.
EXHIBIT 0033 / EQUIFAX / 2017
Printing, size and care
Printing, size and care
Every exhibit is printed to order, direct to garment, by Monster Digital in Miami, Florida. The ink goes into the cotton rather than sitting on top of it, so there is no plastic feel and nothing to crack or peel. It fades the way a good print should: slowly, evenly, over years of washing.
The tee is a Gildan 64000 Softstyle. 100% ring-spun cotton on the solid colours; heathers and Sport Grey are cotton-poly blends. 4.5 oz, tape-reinforced shoulders, no side seams. Unisex, S to 3XL. The artwork is printed on the front, centred on the chest, about 8.5 inches wide by 12 inches tall.
The hoodie is a Gildan 18500 Heavy Blend. 50/50 cotton-poly, 8 oz, double-lined hood, front pouch pocket. Unisex, S to 5XL. The artwork is printed large on the back, about 9 inches wide by 12.5 inches tall, set below the hood so nothing hides under it. The UNHACKED emblem sits on the left chest at about 3.75 inches.
Care. Machine wash cold, inside out. Tumble dry low or hang. No bleach. Do not iron over the print. That is the whole list.
Shipping
Shipping
US shipping is free on every order, no minimum.
Every piece is printed when you order it, so nothing ships until the press runs. Monster Digital usually has an order printed and out the door within two business days. Allow five to eight business days from order to door in the US; most arrive sooner. You get a tracking number by email the moment it ships.
Everything ships from Miami, Florida. International orders are welcome: rates show at checkout, transit runs longer, and any customs duties are charged by your country, not by us.
Need to change or cancel? Email support@unhacked.shop right away. Orders go to print quickly, and once printing has started we cannot cancel, but the returns policy still covers you.
Returns and exchanges
Returns and exchanges
If we got it wrong, we replace it free and you do not ship anything back. Damaged, misprinted, defective, or the wrong item: email support@unhacked.shop within 30 days of delivery with your order number and a photo. Replacement at no cost, or a full refund if you would rather.
If the fit is wrong or you changed your mind, returns are accepted for 30 days from delivery on items that are unworn, unwashed, and in original condition. Email us with your order number for instructions. Return shipping on these is paid by you; the refund goes to your original payment method within 5 to 10 business days of our receiving it.
Exchanges. Fastest route is a return plus a new order. Email us and we will help you get the size right the second time.
Full policy: Refund policy.
