EFX · CIK 33185
What Equifax Inc. told the SEC could break it.
Equifax's disclosures lead with the two forces that define a credit bureau: data regulation and the credit cycle. As a steward of non-public personal financial data it operates under GLBA and FCRA rules on how that data is used, disclosed and protected, with breaches carrying civil and criminal liability and enforcement by the FTC, CFPB, banking regulators, SEC and state attorneys general. Its revenue is also sensitive to macroeconomic and credit conditions — interest rates, inflation, employment, consumer confidence and housing demand — since customers use its data to underwrite consumer loans. Secondary exposures include foreign-currency swings in markets like Argentina and Brazil, and reliance on third-party intellectual-property licenses in certain businesses.
4 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Regulatory & policy
- consumer-data regulation (GLBA, FCRA, CFPB, FTC)high
As a credit bureau, Equifax is subject to GLBA (and FCRA/CROA) rules on the use, disclosure and protection of non-public personal financial data; breaches carry civil/criminal liability and sanctions from FTC, CFPB, banking regulators, SEC and state AGs.
“We are subject to various GLBA provisions, including rules relating to the use or disclosure of the underlying data and rules relating to the physical, administrative and technological protection of non-public personal financial information. Breach of the GLBA can result in civil and/or criminal liability and sanctions by regulatory authorities. Regulatory enforcement of the GLBA is under the purview of the FTC, the CFPB, the federal prudential banking regulators, the SEC and state attorneys general, acting alone or in concert with each other.”
SEC filing →As of 2026
Other disclosures
- credit-cycle / macroeconomic demand sensitivitymedium
Equifax's revenue is sensitive to credit-cycle conditions — affordable-credit demand, interest rates, inflation, employment, consumer confidence and housing demand — since customers use its data to underwrite cards, auto, home and other consumer loans.
“Our customers, and therefore our business and revenues, are sensitive to negative changes in general economic conditions, including the demand and availability of affordable credit and capital, the level and volatility of interest rates, the level of inflation, employment levels, consumer confidence, and housing demand, both inside and outside the United States.”
SEC filing →As of 2026
Currency (FX)
- Argentine peso / Brazilian real and other local currencieslow
Local-currency depreciation (notably Argentina and Brazil) materially reduced reported revenue — a $107.1M (37%) Latin America hit in 2024 — reflecting meaningful FX/inflation exposure in its International segment.
“Local currency fluctuations against the U.S. dollar negatively impacted revenue by $107.1 million, or 37%, in 2024, primarily from Argentina.”
SEC filing →As of 2026
Supplier concentration
- third-party intellectual-property licenseslow
Certain Equifax businesses rely on third-party IP licenses that may not be available on favorable terms (or at all) in the future, creating input-rights dependency.
“In certain of our businesses where we rely on third-party intellectual property licenses, we cannot ensure that these licenses will be available to us in the future on favorable terms or at all.”
SEC filing →As of 2026
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch