The most common data taken involved names, dates of birth and social security numbers -- each between 145.5 million and 146.6 million. Other giant losses included home addresses (99 million), genders (27.3 million) and driver's license numbers (17.6 million).

However, it's the smaller numbers that may matter the most. The SEC filing confirmed that the intruders compromised key government IDs held at its online dispute portal, including full driver's license info (38,000 people), social security and taxpayer ID cards (12,000) and even passports (3,200). More limited data was also stolen in the main set, including payment card numbers (209,000), tax IDs (97,500) and a driver's license state (27,000).

Equifax provided the statement in response to multiple congressional committees investigating the breach, which mostly affected the US. Provided this represents the final tally, it'll help officials understand the scale of what happened and shape their response.