Equifax confirms Apache Struts security flaw is to blame

heck - just needed to read one more paragraph down:

> "The cited Apache Struts flaw dates back to March, according to a public vulnerability disclosure. Patches were released for the vulnerability, suggesting that Equifax did not install the security updates."