The 2017 breach let hackers steal personal details from 150 million accounts.
Former CIO sold all his shares in the company 10 days before the breach was publicly revealed.
The agencies rely on an outdated verification method with an increased risk of identity theft, the Government Accountability Office says.
Equifax says the report contains inaccuracies.
From The 3:59 show: Senator Ron Wyden introduces a draft of the Consumer Data Protection Act.
The credit-monitoring company had "no excuse" for its failures, a UK watchdog says.
Kelly Slater shoots the curl in the desert; Reddit provides a confidence boost; and Mount Washington challenges the hardiest souls and toughest tech.
A year after the revelation of the massive breach, there's unfinished business.
Fallout continues from a 2017 hack that affected roughly 148 million Americans.
We hadn't heard of the firm either, but it had data on hundreds of millions of Americans and businesses and leaked it, according to Wired.
Equifax filed a motion to dismiss the case, but a judge disagrees.
The SEC says former Chief Information Officer Jun Ying knew about Equifax's massive breach and sold his shares before it was publicly announced.