“Furthermore, the FCA points out that Equifax Ltd learned that UK consumer data had been compromised only 6 weeks after the hack was discovered, minutes before the American parent company made the incident public”
The FCA calls the breach “entirely preventable” and fined Equifax’s UK arm £11 million for it, six years later. Equifax UK sent 13.8 million people’s data to its US parent and failed to oversee how it was protected. It found out it was breached minutes before the public did. The full fine would have been nearly £16 million before the discount. That works out to well under a pound per victim.