Former Equifax CEO blames breach on one IT employee

The Equifax data breach that leaked information on the now-145 million people was caused by a vulnerability in Apache's Struts system. Trouble is, the software provider supplied a patch back in March that should have eliminated that vulnerability. But Equifax's former CEO (who suddenly retired last week) told the House Energy and Commerce Committee that a single IT technician was at fault for the whole thing after they failed to install the patch. While speaking to the committee (video below), former CEO Richard Smith outlined the company's normal procedure for new patches: Have a technician install it and then scan the system for any remaining vulnerabilities. Apparently, both the human and computer steps failed.