Equifax has revealed the exact scope of the massive breach that exposed sensitive data about millions of Americans — including confirmation that thousands of passports and driver's licenses were compromised along with the Social Security numbers of nearly all of the more than 146 million affected consumers.
The disclosure, made in a filing Monday with the Securities and Exchange Commission and provided to congressional committees investigating the breach, represents the first precise accounting of what hackers stole from Equifax, one of the nation's biggest credit reporting agencies. It said none of the data represented newly discovered compromised information.
Equifax had previously acknowledged that the Social Security numbers of most of the 146.6 million consumers who were affected were part of the hack. The new filing specifies that 145.5 million Social Security numbers were compromised — representing more than 99 percent of all of the affected consumers.
Get breaking news and insider analysis on the rapidly changing world of media and technology right to your inbox.
More than 200,000 credit card numbers and expiration dates were also collected, it said, as well as government-issued identification documents — like driver's licenses, taxpayer ID cards, passports and military IDs — that about 182,000 consumers uploaded when they disputed credit reports with Equifax.
Equifax said it notified all of those victims by U.S. mail rather than announce them publicly.
"Through the company's analysis, Equifax believes it has satisfied applicable requirements to notify consumers and regulators," it said.