The Infinite Brief

The good news: the number of individuals affected in the breach hasn’t increased from the 146.6 million it previously announced, but extra data records turned up in Mandiant’s ongoing audit of the breach.

Late last week, the company gave the numbers in letters to the various congressional committees investigating the breach, and on Monday, it filed the letter with the SEC.

As well as the 146.6 million names, 146.6 million dates of birth, 145.5 million social security numbers, 99 million address information and 209,000 payment cards breached, the company says, there were also 38,000 US drivers’ licenses and 3,200 passport details.

The breach occurred because Equifax ran an unpatched version of Apache Struts, something it blamed on a single employee.