FICO (legal name: Fair Isaac Corporation ), originally Fair, Isaac and Company , is an American data analytics company based in Bozeman, Montana , focused on credit scoring services. It was founded by Bill Fair and Earl Isaac in 1956. Its FICO score , a measure of consumer credit risk, has become a fixture of consumer lending in the United States.
60-626: In 2013, lenders purchased more than 10 billion FICO scores and about 30 million American consumers accessed their scores themselves. The company reported a revenue of $ 1.29 billion for the fiscal year of 2020. FICO was founded in 1956 as Fair, Isaac and Company by engineer William R. "Bill" Fair and mathematician Earl Judson Isaac . The two met while working at the Stanford Research Institute in Menlo Park, California . Selling its first credit scoring system two years after
120-777: A company which "has encountered, or is likely to encounter, financial difficulties". Equifax Equifax Inc. is an American multinational consumer credit reporting agency headquartered in Atlanta, Georgia and is one of the three largest consumer credit reporting agencies , along with Experian and TransUnion (together known as the "Big Three"). Equifax collects and aggregates information on over 800 million individual consumers and more than 88 million businesses worldwide. In addition to credit and demographic data and services to business, Equifax sells credit monitoring and fraud prevention services directly to consumers. Equifax operates or has investments in 24 countries in
180-475: A different Social Security number, date of birth, and address. Miller contacted Equifax repeatedly in writing and over the telephone, but Equifax refused to delete dozens of false collection accounts from Miller's credit report. The award included $ 18.4 million in punitive damages, and $ 180,000 in compensatory damages. Miller's lawyer, Justin Baxter, explained that the false reporting damaged Miller's reputation, she
240-487: A federal judge in Atlanta awarded class-action attorneys representing consumers approximately $ 77.5 million, suggesting that individual consumers might expect to receive around six or seven dollars. In July 2020, Equifax reported that, after purchasing Ansonia Credit Data (Ansonia), a major source of consumer credit, payments, and invoice receivables (AR) data used by financial companies and other borrowers and businesses in
300-487: A known exploit on one of Equifax' web servers that had yet to be updated to access the credit records of more than 140 million Americans as well as some British and Canadian citizens before the breach was detected and shut down. Equifax disclosed the breach on September 7, 2017, after determining the means and scope of the breach. The event was considered "one of the biggest data breaches in history." Several consumers filed lawsuits in small-claims court against Equifax due to
360-592: A person familiar with the breach believed this early-March intrusion may have been carried out by the same party that breached Equifax's computer systems again in May. According to Bloomberg, Equifax enlisted Mandiant (owned by FireEye, Inc. ) to assist in investigating the March attack. The same cybersecurity firm was hired following the May–July breach. Between May and July 2017, currently unidentified hackers were able to use
420-557: A person who has a money judgment entered in their favor by a court is called a judgment creditor . The term creditor derives from the notion of credit . Also, in modern America, credit refers to a rating which indicates the likelihood a borrower will pay back their loan . In earlier times, credit also referred to reputation or trustworthiness . In accounting presentation, creditors are to be broken down into 'amounts falling due within one year' or 'amounts falling due after more than one year'... The financial statements presentation
480-508: A right to levy against a particular piece of property, or against the debtor's accounts in general, the rules governing creditors' rights determine which creditor has the strongest right to any particular relief. Generally, creditors can be divided between those who " perfected " their interest by establishing an appropriate public record of the debt and any property claimed as collateral for it, and those who have not. Creditors may also be classed according to whether they are "in possession" of
540-479: A subsidiary of Fidelity National Financial as a result of this reverse acquisition merger (See Certegy and Fidelity National Information Services for further information) . In October 2010, Equifax announced it was acquiring Anakam, an identity verification software company headquartered in San Diego, California , which invented and pioneered SMS (text-message based) two-factor authentication . Terms of
600-679: A year after CEO William Lansing joined. In 2016 it opened an office in Bozeman, Montana which later became its headquarters. In March 2020, the US Department of Justice (DOJ) opened an antitrust investigation into FICO, which was reported to be closed in December 2020. In March 2024, US Senator Josh Hawley sent a letter to the DOJ's Antitrust Division urging them to open an investigation into FICO for anti-competitive practices , stating that
660-525: A year of supervised release, and was fined $ 55,000.00 and ordered to pay restitution of $ 117,117.61 in June 2019. An Equifax manager, Sudhakar Reddy Bonthu, also pleaded guilty to insider trading and received a sentence of 8 months of home confinement. In July 2019, The New York Times , the New York Post and other media reported Equifax had agreed to pay approximately $ 650 million to settle with
SECTION 10
#1732765028710720-622: Is alleged that the hearings prompted the Retail Credit Company to change its name to Equifax in 1975 to improve its image. Equifax expanded into commercial credit reports on companies in the United States, Canada and the UK, where it came into competition with companies such as Dun & Bradstreet and Experian . The insurance reporting was phased out. The company also had a division selling specialist credit information to
780-406: Is this: Creditors' rights are the procedural provisions designed to protect the ability of creditors—persons who are owed money—to collect the money that they are owed. These provisions vary from one jurisdiction to another, and may include the ability of a creditor to put a lien on a debtor's property, to effect a seizure and forced sale of the debtor's property, to effect a garnishment of
840-411: Is very concerning. There is intrinsic vulnerability in collecting and storing personal financial information, and we need to have a meaningful discussion on how to protect and limit access to it." According to an October 2017 report from Motherboard , around December 2016, a security researcher examining Equifax's servers found that an online portal, created for Equifax employees only, was accessible to
900-473: The Annualcreditreport.com website incorporates data from U.S. Equifax credit records. Equifax also offers fraud prevention products based on device fingerprinting such as "FraudIQ Authenticate Device." Equifax also offers a credit protection service, called Equifax Protect. According to senator Michael Crapo , "The amount of data that the private industry and Government collect and store
960-685: The Federal Trade Commission (FTC) to resolve investigations by several state attorneys general, the Consumer Financial Protection Bureau , the FTC, and a consumer class-action lawsuit related to the data breach. By September 2019, however, Equifax had added qualifications and "hurdles" to its claims process which put in doubt whether the previously announced cash settlement of $ 125 per affected consumer would actually be awarded. On 19 December 2019,
1020-593: The Philippines , Poland , Russia , Singapore , South Africa , Spain , Taiwan , Thailand , Turkey , and the United Kingdom . A measure of credit risk, FICO scores are available through all of the major consumer reporting agencies in the United States : Equifax , Experian , and TransUnion . FICO scores are also offered in other markets, including Mexico and Canada , as well as through
1080-399: The U.S. Internal Revenue Service was reported to have suspended a $ 7.2 million contract with Equifax as a result of the attack. In 1982, Retail Credit Company was criticized for collecting "...facts, statistics, inaccuracies and rumors... about virtually every phase of a person's life; his marital troubles, jobs, school history, childhood, sex life, and political activities." The company
1140-481: The 1960s, Retail Credit Company was one of the nation's largest credit bureaus, holding files on millions of American and Canadian citizens. Even though the company continued to do credit reporting, the majority of its business was making reports to insurance companies when people applied for new insurance policies, such as life, auto, fire and medical insurance. RCC also investigated insurance claims and made employment reports when people were seeking new jobs. Most of
1200-554: The Americas, Europe , and Asia Pacific . With over 14,000 employees worldwide, Equifax has nearly US$ 5 billion in annual revenue and is traded on the New York Stock Exchange ( NYSE ) under the symbol EFX. Equifax was founded as the Retail Credit Company by Cator and Guy Woolford in Atlanta, Georgia , as Retail Credit Company in 1899. By 1920, the company had offices throughout the United States and Canada. By
1260-542: The Apple App Store and from Google Play . While these apps themselves were not reportedly connected to that breach, they had security flaws of their own, being vulnerable to man-in-the-middle attacks owing to some parts using HTTP instead of HTTPS . On October 8, 2017, Krebs reported that The Work Number , a website operated by Equifax's TALX division, exposed the salary histories for employees of tens of thousands of US companies to anyone in possession of
SECTION 20
#17327650287101320-578: The Australian market research and opinion polling company ReachTEL in September 2015, which continues to produce opinion polls in Australia. Equifax was the subject of more than 57,000 consumer complaints to the Consumer Financial Protection Bureau from October 2012 to September 17, 2017, with most complaints relating to incomplete, inaccurate, outdated, or misattributed information held by
1380-539: The Insolvency Practitioner and readily accept annual reports when submitted. Under the Companies Act 2006 , a company's creditors may apply to the court for an order summoning a meeting of the creditors or some of the creditors who fall into a specific category, in order to consider a compromise or " arrangement " between the company and its creditors. If a majority representing 75% in value of
1440-544: The National Consumer Telecom and Utilities Exchange (NCTUE), an exchange of non-credit data including consumer payment history on telecommunications and utility accounts. In 1999, Equifax began offering services to the credit consumer sector in addition, such as credit fraud and identity theft prevention products. Equifax and other credit monitoring agencies are required by law to provide US residents with one free credit file disclosure every 12 months;
1500-574: The St. Louis area for reporting she was dead. A Heartland Bank spokesperson said the bank "immediately investigated and contacted the credit reporting agencies after Haman reported" she was still alive. An Equifax "spokesperson told the Post-Dispatch that Equifax blocked the Heartland account information from appearing on Haman's credit report after a reporter's inquiry." In April 2014, Equifax
1560-452: The area of creditor's rights perform one or all of the following: In the UK, once an Individual Voluntary Arrangement (IVA) has been applied for, and is in place through the courts, creditors are prevented from making direct contact under the terms of the IVA. All ongoing correspondence of an IVA must first go through the appointed Insolvency Practitioner . The creditors will begin to deal with
1620-419: The attack. On March 1, 2018, Equifax announced that 2.4 million additional U.S. customers were affected by the breach, increasing the number of affected to 147.9 million Americans. The company claims to have discovered evidence of the cybercrime event on July 29, 2017. Residents in the United Kingdom (15.2 million) and Canada (about 19,000) were also impacted. The vulnerability which Chinese hackers leveraged
1680-504: The breach, which China has denied. In September 2017, Brian Krebs revealed that the Argentine arm of Equifax had left private data from approximately 14,000 consumers, and more than 100 staff members, available to anyone who entered "admin" as both the username and password for one of its online systems. On September 7, 2017, the same day as Equifax announced a large security breach , Equifax removed its official mobile apps from
1740-708: The breach, while Equifax later came to a $ 575 million settlement with the Federal Trade Commission to offer either a cash payment or credit monitoring for those affected by the breach. The data from the breach has yet to be seen on black markets or the dark web by security experts, making it difficult to identify the origin of the breach. However, in February 2020, the United States Department of Justice indicted four members of China 's People's Liberation Army on nine charges related to
1800-447: The collateral, and by whether the debt was created as a purchase money security interest . A creditor may generally ask a court to set aside a fraudulent conveyance designed to move the debtor's property or funds out of their reach. Some lawyers have a specialized practice area focused on the collection of such debts . Such attorneys are frequently referred to as collection attorneys or collection lawyers. Attorneys who practice in
1860-459: The companies in 1995. Originally called Fair, Isaac and Company (hence the abbreviation FICO), this name was changed to Fair Isaac Corporation in 2003. Originally based in San Rafael, California , FICO moved its headquarters to Minneapolis, Minnesota , in 2004, a few years after Minnesota resident Thomas Grudnowski took over as CEO. In 2013, it moved its headquarters to San Jose, California,
FICO - Misplaced Pages Continue
1920-505: The company "appears to be using its monopolistic power over the credit scoring market to increase costs for mortgage lenders." Between 2020 and 2023, at least 10 antitrust class action lawsuits were filed against FICO involving "business to business" purchases of FICO scores, with the plaintiffs alleging that that FICO maintains monopoly power through anticompetitive agreements and charges artificially inflated prices for FICO scores. In September 2023 US District Judge Edmond Chang ruled that
1980-639: The company's creation, FICO pitched its system to fifty American lenders . FICO went public in July 1987 and is traded on the New York Stock Exchange . The company debuted its first general-purpose FICO score in 1989. FICO scores are based on credit reports and "base" FICO scores range from 300 to 850, while industry-specific scores range from 250 to 900. Lenders use the scores to gauge a potential borrower's creditworthiness. Fannie Mae and Freddie Mac first began using FICO scores to help determine which American consumers qualified for mortgages bought and sold by
2040-441: The company. In September 2017, Equifax announced a cyber-security breach , which it claims to have occurred between mid-May and July 2017, where cybercriminals accessed approximately 145.5 million U.S. Equifax consumers' personal data, including their full names, Social Security numbers , birth dates, addresses, and driver license numbers . Equifax also confirmed at least 209,000 consumers' credit card credentials were taken in
2100-458: The credit work was then being done by a subsidiary , Retailers Commercial Agency. Retail Credit Company's information holdings and willingness to sell its information attracted criticism in the 1960s and 1970s. These included that it collected "... facts, statistics, inaccuracies and rumors ... about virtually every phase of a person's life; his marital troubles, jobs, school history, childhood, sex life, and political activities." The company
2160-455: The creditors or class of creditors present and voting either in person or by proxy at the meeting agree a compromise, the meeting may apply to the court for the compromise to be enforced. The same provision would apply to members ( shareholders ) of a company seeking to make an arrangement with the company. The Corporate Insolvency and Governance Act 2020 makes similar provision where a compromise has been proposed between creditors or members and
2220-458: The data of hundreds of thousands of Americans in order to show Equifax the vulnerabilities within its systems. They said they could have downloaded the data of all of Equifax's customers in 10 minutes: "I've seen a lot of bad things, but not this bad." The same types of sensitive private information of American consumers (names, birth dates, social security numbers, etc.) were exposed as in the May–July breach, according to Motherboard. Additionally,
2280-668: The deal were not disclosed. Equifax purchased eThority, a business intelligence (BI) company headquartered in Charleston, South Carolina , in October 2011. eThority is partnering with TALX , a St. Louis -based business unit of Equifax, and remained in Charleston. In February 2016, Equifax acquired the Australasian company Veda , the largest credit reference agency in Australia at the time. Veda had previously acquired
2340-443: The debtor's wages, and to have certain purchases or gifts made by the debtor set aside as fraudulent conveyances . The rights of a particular creditor usually depend in part on the reason for which the debt is owed, and the terms of any writing memorializing the debt. Creditors' rights deal not only with the rights of creditors against the debtor, but also with the rights of creditors against one another. Where multiple creditors claim
2400-524: The disclosure of the 2017 data breach. In January 2020, Equifax agreed to a global settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau, and 50 U.S. states and territories. For those that were affected by the data breach, there were open suggestions to file claims against it. The settlement includes up to $ 425 million to help people affected by the data breach. Equifax ultimately reached
2460-500: The employee's Social Security Number and date of birth. For roughly half the US population, both of the latter pieces of data are known to be in possession of criminals, following Equifax's May–July 2017 security breach . In July 2019, Equifax settled with the Federal Trade Commission for $ 700 million. This number contains a $ 380,500,000 consumer restitution fund, part of the class action lawsuit. On October 12, 2017, Equifax's website
FICO - Misplaced Pages Continue
2520-399: The errors had affected only a few people. The following day, a class-action lawsuit was filed by Jacksonville, Florida resident Nydia Jenkins against Equifax alleging she had received a "substantially pricier car loan" (resulting in an additional loan payment of $ 2,352 more per year) due to Equifax reporting her credit score 130 points off from what it should have been. In February 2023, it
2580-416: The fourth U.S. credit reporting bureau, PRBC . Creditor A creditor or lender is a party (e.g., person, organization, company, or government) that has a claim on the services of a second party. It is a person or institution to whom money is owed. The first party, in general, has provided some property or service to the second party under the assumption (usually enforced by contract ) that
2640-566: The insurance industry but spun off this service, including the Comprehensive Loss Underwriting Exchange (CLUE) database as ChoicePoint in 1997. Equifax formerly offered digital certification services, which it sold to GeoTrust in September 2001. Also in 2001, Equifax spun off its payment services division, forming the publicly listed company Certegy , which subsequently acquired Fidelity National Information Services in 2006. Certegy effectively became
2700-401: The open Internet. "I didn't have to do anything fancy," the researcher told Motherboard, explaining that the site was vulnerable to a basic "forced browsing" bug. The researcher requested anonymity out of professional concerns. "All you had to do was put in a search term and get millions of results, just instantly—in cleartext, through a web app," they said. In total, the researcher downloaded
2760-444: The personal credit and payment history of individuals, indicating how they have honored financial obligations such as paying bills or repaying a loan . Credit grantors use this information to decide what sort of products or services to offer their customers, and on what terms. Equifax also provides commercial credit reports containing financial and non-financial data on businesses of all sizes. Equifax collects and provides data through
2820-761: The plaintiffs, which include credit unions, real estate brokerages, auto dealers, and other companies, had presented enough evidence that FICO had violated antitrust law to allow the lawsuits to proceed. FICO is headquartered in Bozeman, Montana and it has additional U.S. locations in San Jose, California , Roseville, Minnesota , San Diego, California , San Rafael, California , Fairfax, Virginia , and Austin, Texas . The company has international locations in Australia , Brazil , Canada , China , Germany , India , Italy , Japan , South Korea , Lithuania , Malaysia ,
2880-439: The same server targeted in the later breaches, which Motherboard speculates may suggest multiple breaches by more than one party may have occurred. On September 18, 2017, Bloomberg News reported that Equifax had been the victim of a "major breach of its computer systems" in March 2017, and that in early March it had begun "notifying a small number of outsiders and banking customers" about this attack. According to Bloomberg,
2940-464: The second party will return an equivalent property and service. The second party is frequently called a debtor or borrower . The first party is called the creditor, which is the lender of property, service, or money. Creditors can be broadly divided into two categories: secured and unsecured . The term creditor is frequently used in the financial world, especially in reference to short-term loans , long-term bonds , and mortgage loans . In law,
3000-480: The security of their customers' personal information." Equifax selected the law firm DLA Piper to work on the case in D.C. It had turned to Edelman for earlier crisis control after the October 2017 privacy breach. Consumer lawsuits claiming damages under the FCRA have been successful in small claims court. Equifax software engineer Sudhakar Reddy was charged with insider trading for purchasing options prior to
3060-416: The security researchers said they were able to gain shell access on Equifax's servers and discovered and reported to Equifax additional vulnerabilities. According to the reporting, despite receiving this warning from the security researcher, the affected portal was not closed until six months later in June, well after the March and May–July breaches had begun. Moreover, the employee portal was reportedly not
SECTION 50
#17327650287103120-600: The shipping and logistics sectors, the firm has expanded its position in commercial payment technology solutions. On 2 August 2022, a week after its CEO Mark Begor was deemed "uniquely qualified to lead the Company" and was granted a $ 25 million bonus package by Equifax's board, the Wall Street Journal reported that Equifax had sent millions of incorrectly calculated credit scores to lenders. Equifax acknowledged reporting inaccurate credit scores, but insisted
3180-574: Was CVE - 2017-5638 ; the hackers managed to stay in Equifax's systems undetected for approximately 134 days. In March 2018, the Security and Exchange Commission accused Jun Ying, Equifax's former CIO , of illicit insider trading, by selling company stock before the breach was publicly disclosed. After an investigation by the FBI , Ying pleaded guilty, was sentenced to four months of prison plus
3240-575: Was also alleged to reward its employees for collecting derogatory information on consumers. This led to discrimination against queer people and people of color . In 1970, after the company had computerized its records, which led to wider availability of the personal information it held, the U.S. Congress held hearings that led to the enactment of the Fair Credit Reporting Act . This legislation gave consumers rights regarding information stored about them in corporate databanks. It
3300-881: Was announced Equifax had acquired the Barueri -headquartered credit bureau, Boa Vista Serviços for $ 596 million, starting to trade on the B3 in São Paulo , under the symbol EFXB31. Equifax primarily operates in the business-to-business sector, selling consumer credit and insurance reports and related analytics to businesses in a range of industries. Business customers include retailers , insurance firms, healthcare providers , utilities, government agencies, as well as banks , credit unions , personal and specialty finance companies and other financial institutions. Equifax sells businesses credit reports, analytics, demographic data, and software. Credit reports provide detailed information on
3360-504: Was charged with rewarding its employees for collecting negative information on consumers in the 1970s. There was a consent decree. In 1975 the company changed its name to "Equifax"—reportedly to counteract its tarnished reputation. The company has been fined by the Federal Trade Commission on two occasions for violating the Fair Credit Reporting Act ("FCRA"). In 2000, Equifax, along with Experian and TransUnion,
3420-437: Was denied credit, and her private information was given to businesses Miller had no relationship with. The jury's verdict is believed to be the largest award in an individual case under the Fair Credit Reporting Act. An Equifax spokesperson said that Equifax is considering appealing the jury's verdict. A federal judge reduced the award to $ 1.62 million in 2014. In 2014, Equifax and Heartland Bank were sued by Kimberly Haman of
3480-556: Was fined $ 2.5 million for blocking and delaying phone calls from consumers trying to get information about their credit. In 2003, the FTC took Equifax to court for the same reason and settled its lawsuit with the company for a fine of $ 250,000. In July 2013, a federal jury in Oregon awarded $ 18.6 million to Julie Miller of Marion County against Equifax for violations of the Fair Credit Reporting Act. In her lawsuit, Miller alleged Equifax had merged her credit reports with another person with
3540-551: Was reported to have been offering visitors malware via drive-by download . The malware was disguised as an update for Adobe Flash . At that time, only 3 out of 65 top anti-malware products provided protection against the particular malware, meaning that many visitors were at risk of having their computers infected when visiting the Equifax website. On October 13, 2017, the attack was revealed to have been performed by hijacking third-party analytics JavaScript from Digital River brand FireClick. Also on October 13, 2017,
3600-499: Was sued in New York federal court by God Gazarov, who claimed the company erroneously reports him as having no credit history because of his unusual first name. Gazarov settled his lawsuit in May 2015, with Equifax agreeing to enter his name into their database. On November 4, 2017, it was reported that a group of five Oklahomans had sued the company, claiming that Equifax "violated laws which require financial institutions to protect
#709290