Equifax hit with $70 billion class-action lawsuit after massive hack

The lawsuit was filed hours after the disclosure.
 By 
Patrick Kulp
 on 
Equifax hit with $70 billion class-action lawsuit after massive hack
Credit: AP/REX/Shutterstock

That didn't take long.

Two Oregon women filed a class action lawsuit against Equifax Thursday evening, just hours after the credit reporting agency revealed a massive data breach that may have compromised personal information belonging to 143 million Americans.

The complaint accuses Equifax of negligence in protecting consumer data, arguing the company chose to skimp on costs rather than take adequate technical measures that might have thwarted hackers.

"Equifax knew and should have known that failure to maintain adequate technological safeguards would eventually result in a massive data breach," the document alleges. "Equifax could have and should have substantially increased the amount of money it spent to protect against cyber-attacks but chose not to."

The lawsuit seeks compensation of up to $70 billion for all consumers affected as well as a court order requiring the company to preserve all internal records related to the attack. It was filed on behalf of plaintiffs Mary McHill and Brook Reinhard in a federal court in Portland, Oregon.

The Securities and Exchange Commission also announced Friday that it is opening an investigation into the breach.

Equifax said in a statement on Thursday that the hack took place between mid-May and July 29 when the company discovered it and shut it down. The company then hired a cybersecurity firm to investigate and contacted law enforcement before disclosing it to the public this week.

Days after the attack was identified, three Equifax execs unloaded nearly $2 million in company stock. A company spokesperson denied that the execs had any knowledge of the breach at the time.

The lawyers behind the suit said they are hoping it will be a "teachable moment" for better data security.

"Ms. McHill and Mr. Reinhard hope Equifax will use this massive data breach, and their subsequent lawsuit, as a teachable moment to finally adopt adequate safeguards to protect against this type of cyberattack in the future," the document says.

Topics Cybersecurity

Mashable Image
Patrick Kulp

Patrick Kulp is a Business Reporter at Mashable. Patrick covers digital advertising, online retail and the future of work. A graduate of UC Santa Barbara with a degree in political science and economics, he previously worked at the Pacific Coast Business Times.

Mashable Potato

Recommended For You
Grammarly removes AI feature which used real authors' identities, faces class action lawsuit
The Grammarly logo is seen displayed on a smartphone screen.

Victim of Jeffrey Epstein files class-action lawsuit against Google
By Jack Dawes
Laws regarding cyber crimes - stock photo

This massive 55-inch Class T7 TCL Smart TV is $200 off this weekend
This massive 55-inch Class T7 TCL Smart TV is $200 off this weekend

OnlyFans 'baits and switches' customers with false promises, lawsuit claims
onlyfans logo on a phone

Bumble failed to protect user data in ShinyHunters hack, class action suit claims
thumb tapping bumble logo on smartphone

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

Google launches Gemma 4, a new open-source model: How to try it
Google Gemma


NYT Strands hints, answers for April 3, 2026
A game being played on a smartphone.
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!