WASHINGTON, D. C. – Attorney General Karl A. Racine today announced that Equifax will pay up to $600 million in restitution and penalties to resolve an investigation by 50 Attorneys General into a massive 2017 data breach. The coalition, which includes 48 states, the District of Columbia, and the Commonwealth of Puerto Rico, found evidence that Equifax’s failure to maintain reasonable security enabled hackers to access its systems and resulted in the largest-ever breach of consumer data.