Introduction This report examines the Data breach at Eouifak which took in place in 201?. The report identifies the key factor that weaken security situation at Equifas leads to the data breach. It goes further to look at the wluerabilities that the attackers idenh'iied and exploited facilitating the Equifatr incident. The report also takes a look at the security measures that Eouifax had in place despite having the incident of data breach. It gives the recommendations and the action plan which can he put in place to ensure Equifatr have good future. Background Eouifan is a credit reporting founded in 1899 as a United States of America with the responsibility of collecting and making available information to organizations and individuals on their status on credit as well as the creditworthiness. Due to Equifax growth; it worked wii the data of over 32!] million consumers and 91 million businesses globally resulting to Equifan generating soss gross margin {Srinivasana Pitcher Er. Goldberg, 201?}. Despite working and keeping data for the high number of businesses and individuals, in March EMT-i, the organisation's security was breached resulting to stealing of personal identification data. Analysis The breach of company security took place due to; first, failure to identify the vulnerability of Apache Struts during its installation to the company which was never patched in time and after the realization of the risk it could bring. Secondly is the challenge of detection within the system due to expiry of the digital certificate facilitated communication between attackers and compromised server users without detection {McKay 8.: Garrett, 2018). Thirdly, the database for the Equiian was not segmented from each other which allowed the attackers to