H 4383 Resolution, By Gilliard and McEachern
 A HOUSE RESOLUTION TO URGE THE ATTORNEY GENERAL TO FILE A LAWSUIT AGAINST
 EQUIFAX FOR THE DATA BREACH THAT AFFECTED OVER TWO MILLION SOUTH CAROLINA
 RESIDENTS.

   11/09/17  House  Prefiled
   11/09/17  House  Referred to Committee on Invitations and Memorial
                     Resolutions
   01/09/18  House  Introduced (House Journal-page 72)
   01/09/18  House  Referred to Committee on Invitations and Memorial
                     Resolutions (House Journal-page 72)

TO URGE THE ATTORNEY GENERAL TO FILE A LAWSUIT AGAINST EQUIFAX FOR THE DATA BREACH THAT AFFECTED OVER TWO MILLION SOUTH CAROLINA RESIDENTS.

Whereas, the data breach of Equifax potentially compromised the personal data of one hundred forty-three million consumers, including over two million in South Carolina. Equifax failed to protect sensitive and personal information of consumers which could be damaging in the future; and

Whereas, Equifax left private consumer information exposed to hackers by relying on certain computer code that it knew or should have known was vulnerable to exploitation without having in place safeguards sufficient to prevent the consumer data it stored in its system; and

Whereas, still-unknown third parties infiltrated Equifax's computer system through a page on its website that allows consumers to submit information to initiate and support a formal dispute of information in their credit reports; and

Whereas, once in, the unauthorized third parties were able to access and likely stole consumer information from Equifax's network. The hackers were present in Equifax's system from at least May 2017 through the end of July 2017 without Equifax detecting them; and

Whereas, although fixes for the computer code vulnerability were available to Equifax and posted on at least one United States Government website, the company failed to implement the recommended fixes, or otherwise put in place other safeguards and security controls, such as encryption, that would sufficiently protect consumers' personal data; and

Whereas, Equifax is a credit reporting firm that businesses rely on to make decisions about the credit worthiness of consumers, therefore affecting whether consumers can buy a house, acquire a loan, lease a vehicle, or even get a job. Consumers have little to no control over the information that Equifax acquires about them; and

Whereas, the Attorney General should seek civil penalties, disgorgement of profits, restitution, costs, and attorneys' fees. The Office of the Attorney General should also seek injunctive relief to prevent harm to South Carolina residents resulting from the company's actions and inaction. Now, therefore,

Be it resolved by the House of Representatives:

That the members of the South Carolina House of Representatives, by this resolution, urge the Attorney General to file a lawsuit against Equifax for the data breach that affected over two million South Carolina residents.

Be it further resolved that a copy of this resolution be presented to the Attorney General.