So, the compliance angle here? It is the dust in wind that Equifax created from its statements over the past week and actions which led to the massive data breach in the first place. The former head of the company, Richard Smith, testified before Congress that the entire breach was the fault of one lone employee. Yes, you read that right, the rogue employee myth lives. Admitting that the company had received the security warning that part of its security software, Apache Struts, had a deficiency and needed an upgrade to install a patch. A Memo was sent to the IT Department and Smith literally testified before Congress that one Equifax employee 'didn't read the memo' and did not install the patch. Of course, all this happened in March some three months before the breach occurred. Equifax either did not verify the update was installed or could not do so. Further none of the company's internal controls or other redundant back-ups picked up this mis-adventure.