Originally Posted by
wco81
Culpability still likes mostly with the companies which failed to protect their customers' data.
As mentioned previously, it's more of a failing with how identity works in the US than anything else, though that still doesn't excuse Equifax's poor handling of their security.