>>"Equifax's IT management structure was complicated" and "Equifax uses legacy software that is hard to secure"

I feel for them (not!). BUT they shouldn't store any valuable data then. They should be not-insurable.