Equifax failed to patch security vulnerability in March

Equifax said late Monday that an outside review determined about 2.5 million additional US consumers were potentially impacted.

WASHINGTON: Equifax Inc was alerted in March to the software security vulnerability that led to hackers obtaining personal information of more than 140 million Americans but took months to patch it, its former CEO said in testimony to be delivered to Congress on Tuesday. 

"It appears that the breach occurred because of both human error and technology failures," former CEO Richard Smith said in written testimony released on Monday by the Energy and Commerce Committee.