It went on to officially confirm that it had hired cybersecurity firm Mandiant to handle computer forensics and incident response. Based on this work, Equifax has "established that the UK core consumer credit data (such as balances and debts owed) or credit referencing systems were not impacted" by the breach. The data of UK customers exposed "related to an historic system that was used by some UK business customers to validate consumers' identities".