{"product_id":"equifax-breach-shirt-2017-apache-struts-cve-2017-5638-graphic-tee-unhacked","title":"EXHIBIT 0033 — EQUIFAX","description":"\u003cp\u003eThe patch had been out for two months. The thing watching the door had been switched off for far longer.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe vulnerability was CVE-2017-5638, a flaw in Apache Struts that let a crafted web request run commands on the server. It was disclosed, with a patch, on 7 March 2017. Equifax ran an internet-facing application called ACIS on a version of Struts that had the hole, did not apply the fix, and the attackers came through it in the middle of May.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThey then had access to the personal data of about 147.9 million people: names, dates of birth, addresses, Social Security numbers, driver's licence numbers, and for some, credit card numbers. That is not customers who signed up for anything. It is roughly half the adult population of the United States, whose data Equifax held because it is a credit bureau and that is its business.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe part that turns a bad patch cycle into a catastrophe is what happened next, which is nothing. Equifax had a device that inspected encrypted network traffic looking for exactly this kind of exfiltration. It relied on a certificate to decrypt and read the traffic, and that certificate had expired. While it was expired, the traffic passed uninspected, and the attackers moved data out for weeks without tripping a single alarm.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe intrusion was discovered only when someone renewed the certificate. The instant the monitor could see again, it saw the suspicious traffic, and Equifax pulled the application offline the same day.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eHow long the certificate had been expired is genuinely disputed. A congressional report put it at around nineteen months; Equifax told government investigators it was closer to ten. Either way it was expired before the Struts patch was ever released, which is the only figure that matters: the camera was off before the door was even known to be unlocked.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe settlement with the FTC, the CFPB and the states, in July 2019, was at least $575 million and up to $700 million, the largest data-breach settlement in US history at the time.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThey patched the door eventually. Nobody had checked whether the camera was recording.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0033 \/ EQUIFAX \/ 2017\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Charcoal \/ S","offer_id":54516843446556,"sku":"57306296538336074230","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ S","offer_id":54516843479324,"sku":"42466968125811046860","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ S","offer_id":54516843512092,"sku":"29152068408065067112","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ S","offer_id":54516843544860,"sku":"16218661495229481128","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ S","offer_id":54516843577628,"sku":"30602077151043809488","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ M","offer_id":54516843610396,"sku":"22096139632298893824","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ M","offer_id":54516843643164,"sku":"26805420127502809094","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ M","offer_id":54516843675932,"sku":"37912166484426488773","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ M","offer_id":54516843708700,"sku":"23090797627251055520","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ M","offer_id":54516843741468,"sku":"18834291504532319231","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ L","offer_id":54516843774236,"sku":"17416043818516714279","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ L","offer_id":54516843807004,"sku":"11666390089358247147","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ L","offer_id":54516843839772,"sku":"12651346080694388214","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ L","offer_id":54516843872540,"sku":"92513268448963447008","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ L","offer_id":54516843905308,"sku":"24549611997361237718","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ XL","offer_id":54516843938076,"sku":"97692918848554172329","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ XL","offer_id":54516843970844,"sku":"32882025450567807934","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ XL","offer_id":54516844003612,"sku":"41278162575519041013","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ XL","offer_id":54516844036380,"sku":"22159041953446756732","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ XL","offer_id":54516844069148,"sku":"14763055504719506850","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 2XL","offer_id":54516844101916,"sku":"25577428531800746289","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 2XL","offer_id":54516844134684,"sku":"14157951279781188001","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 2XL","offer_id":54516844167452,"sku":"10619063721052242320","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 2XL","offer_id":54516844200220,"sku":"84614675215101692116","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 2XL","offer_id":54516844232988,"sku":"24285550209566223670","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 3XL","offer_id":54516844265756,"sku":"41434378613109852741","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 3XL","offer_id":54516844298524,"sku":"10026847611682181222","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 3XL","offer_id":54516844331292,"sku":"35568522599761931466","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 3XL","offer_id":54516844364060,"sku":"78052830078578925245","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 3XL","offer_id":54516844396828,"sku":"59089195003497393118","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/9625913884002908635_2048.jpg?v=1788446733","url":"https:\/\/unhacked.shop\/products\/equifax-breach-shirt-2017-apache-struts-cve-2017-5638-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}