Equifax data breach affected 8,000 Canadians — not 100,000, review finds

Equifax Inc. said Monday that it has revised down the number of Canadians affected by its high-profile data breach and now puts the number at about 8,000 customers.

The company previously estimated that some 100,000 Canadians could have had their personal information compromised before a forensic review by cybersecurity firm Mandiant found the actual number to be much lower.

Coverage of Equifax on Globalnews.ca:

2:07 Equifax reportedly knew for months about cyber-security vulnerability

• Equifax reportedly knew for months about cyber-security vulnerability
• Massive cyber-attack at Equifax could leave millions vulnerable
• Millennials growing target for scam artists: survey
• Albertans taking on even more debt
• Millennials being targeted for online fraud

Previous Video

Next Video

The review adds about 2.5 million Americans to the list of those affected by the massive cyber attack, bringing the total number of people in the U.S. potentially impacted to 145.5 million.

Equifax says the review also determined that some Canadians had their credit card information hacked and will be mailing out written notices to all potentially impacted Canadians, but did not provide a specific estimate.

On a website update, Equifax’s Canadian division said it has not yet mailed out any notices and made clear it would not be making any unsolicited calls or emails about the issue.

READ MORE: Equifax CEO retires in wake of damaging cyberattack

Equifax first notified the public of the security breach on Sept. 7, though it said the unauthorized access is thought to have happened from May 13 to July 30, with Equifax’s security team catching the hack on July 29.

The company has said that it believes that hackers accessed Equifax Canada’s systems through a consumer website application intended for use by U.S. consumers.

Equifax is facing investigations in Canada and the U.S., as well as at least two proposed class actions filed in Canada.

The massive data breach has also led to a number of high-profile departures at the Atlanta-based consumer credit reporting agency, including its chief executive, chief information officer and chief security officer.