LEGAL PROCEEDINGS
−Removed: Remaining Matters Related to 2017 Cybersecurity Incident
−Removed: Canadian Class Actions.
−Removed: Five putative Canadian class actions, four of which are on behalf of a national class of approximately 19,000 Canadian consumers, are pending against us in Ontario, British Columbia and Alberta.
−Removed: Each of the proposed Canadian class actions asserts a number of common law and statutory claims seeking monetary damages and other related relief in connection with a material cybersecurity incident in 2017.
−Removed: In addition to seeking class certification on behalf of Canadian consumers whose personal information was allegedly impacted by the 2017 cybersecurity incident, in some cases, plaintiffs also seek class certification on behalf of a larger group of Canadian consumers who had contracts for subscription products with Equifax around the time of the incident or earlier and were not impacted by the incident.
−Removed: The Ontario class action has been certified in part but is otherwise at a preliminary stage.
−Removed: All other purported class actions are at preliminary stages or stayed.
−Removed: In December 2021, we received a Civil Investigative Demand (a “CID”) from the CFPB as part of its investigation into our consumer disputes process at our USIS business unit in order to determine whether we have followed FCRA requirements for the proper handling of consumer disputes.
−Removed: The CID requested the production of documents and answers to written questions.
−Removed: In January 2023, the CFPB informed us that its enforcement division would be investigating our previously-disclosed coding issue identified within a legacy server environment in the U.S.
−Removed: that impacted how some credit scores were calculated during a three-week period in 2022.
−Removed: In January 2025, we entered into a consent order with the CFPB to settle the investigation into our consumer disputes process at our USIS business unit and the investigation into our previously-disclosed coding issue.
−Removed: The consent order resolves these investigations and requires the payment of a civil money penalty of $15 million.
−Removed: As part of the settlement, the Company has agreed to modify certain business practices.
−Removed: In July 2023, we received a CID from the CFPB as part of its investigation into data accuracy and dispute handling at our Workforce Solutions business unit in order to determine whether we have followed the FCRA's requirements.
−Removed: We received a second CID from the CFPB in March 2024 and a third CID from the CFPB in August 2024 as part of the same investigation.
+Added: Antitrust Litigation
+Added: On May 28, 2024, a lawsuit alleging violations of certain antitrust laws in connection with our Workforce Solutions business unit was filed against us in the Eastern District of Pennsylvania.
+Added: The complaint seeks certification of a class of all persons who purchased electronic verification of income and employment services from May 28, 2020 to present and unspecified monetary damages, costs and attorneys’ fees.
+Added: We dispute the allegations in the complaint and intend to defend against the claims.
+Added: In July 2023, we received a Civil Investigative Demand (a "CID") from the CFPB as part of its investigation into data accuracy and dispute handling at our Workforce Solutions business unit in order to determine whether we have followed the FCRA's requirements.
+Added: We received a second CID from the CFPB in March 2024 and a third CID in August 2024 as part of the same investigation.
The CIDs request the production of documents and answers to written questions.
We are cooperating with the CFPB in its investigation and providing responses and information on an ongoing basis.
−Removed: At this time, we are unable to predict the outcome of this CFPB investigation, including whether the investigation will result in any actions or proceedings against us.
+Added: At this time, we are unable to predict the outcome of the CFPB's investigation, including whether the investigation will result in any actions or proceedings against us.
Equifax has been named as a defendant in various other legal actions, including administrative claims, regulatory matters, government investigations, class actions and other litigation arising in connection with our business.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.