Gotta admire the artful way they gave the appearance of disclosure while avoiding answering the most damning question: why did it take so long for them to patch Struts?
"The particular vulnerability in Apache Struts was identified and disclosed by U.S. CERT in early March 2017."
"Equifax's Security organization was aware of this vulnerability at that time, and took efforts to identify and to patch any vulnerable systems in the company's IT infrastructure."
?????????!!!!!!??????
"While Equifax fully understands the intense focus on patching efforts, the company's review of the facts is still ongoing."
"The particular vulnerability in Apache Struts was identified and disclosed by U.S. CERT in early March 2017."
"Equifax's Security organization was aware of this vulnerability at that time, and took efforts to identify and to patch any vulnerable systems in the company's IT infrastructure."
?????????!!!!!!??????
"While Equifax fully understands the intense focus on patching efforts, the company's review of the facts is still ongoing."