As described in the indictment, the hackers broke into Equifax’s network through a vulnerability in the company’s dispute resolution website. Once in the network, the hackers spent weeks conducting reconnaissance, uploading malicious software, and stealing login credentials, all to set the stage to steal vast amounts of data from Equifax’s systems. While doing this, the hackers also stole Equifax’s trade secrets, embodied by the compiled data and complex database designs used to store the personal information. Those trade secrets were the product of decades of investment and hard work by the company.
via Attorney General William P. Barr Announces Indictment of Four Members of China’s Military for Hacking into Equifax | OPA | Department of Justice.