Equifax Releases 2025 Security Annual Report

Rhea-AI Summary

Equifax (NYSE: EFX) released its 2025 Security Annual Report on March 18, 2026, highlighting AI-driven defenses, security-enabled product innovation, and industry collaboration.

Key metrics include a $3 billion global security and technology transformation, defense against 19.8 million daily threats (+30% YoY), ~50% SOC ticket auto-resolution, 61% faster security consults, and a 4.4 NIST cybersecurity framework score.

Positive

• $3 billion global security and technology transformation principally complete
• Defended against 19.8 million cyber threats per day (a 30% increase)
• AI triage agent auto-resolves nearly 50% of SOC tickets
• Security consult times reduced by 61%
• Achieved a 4.4 NIST cybersecurity framework score, outperforming industry benchmarks

Negative

• Threat volume rose 30% year-over-year, increasing operational pressure
• Adversarial AI attacks (including live deepfakes) targeted leadership, signaling elevated threat sophistication
• Threat actors weaponized AI to increase attack speed and sophistication

News Market Reaction – EFX

-1.88%

1 alert

-1.88% News Effect

On the day this news was published, EFX declined 1.88%, reflecting a mild negative market reaction.

Data tracked by StockTitan Argus on the day of publication.

Key Figures

Security & tech transformation: $3 billion Daily cyber threats: 19.8 million per day Threat volume increase: 30% +4 more

7 metrics

Security & tech transformation $3 billion Global security and technology transformation program referenced as principally complete

Daily cyber threats 19.8 million per day Average number of cyber threats defended against in 2025

Threat volume increase 30% Increase in average daily cyber threats vs prior year

SOC tickets auto-resolved Nearly 50% Share of Security Operations Center tickets handled by AI triage agent

Security consult time reduction 61% Reduction in security consult times via automated guardrails and AI assistants

Annual report count Sixth annual Sixth Equifax Security Annual Report released for 2025

NIST CSF score 4.4 2025 NIST Cybersecurity Framework maturity score for Equifax program

Market Reality Check

Price: $178.10 Vol: Volume 818,806 vs 20-day ...

low vol

$178.10 Last Close

Volume Volume 818,806 vs 20-day average 1,318,357 (relative volume 0.62) ahead of this security-focused update. low

Technical Price $187.32 is trading below the 200-day MA $229.80, well under the prior trend level.

Peers on Argus

EFX gained 1.16% while peers were mixed: VRSK -0.45%, BAH +1.06%, FCN +1.45%, HU...

EFX gained 1.16% while peers were mixed: VRSK -0.45%, BAH +1.06%, FCN +1.45%, HURN +0.13%, RBA +0.44%. The move appears company-specific rather than a broad sector rotation.

Historical Context

5 past events · Latest: Mar 09 (Positive)

Pattern 5 events

Date	Event	Sentiment	Move	Catalyst
Mar 09	Mortgage affordability push	Positive	-4.2%	Offered VantageScore 4.0 mortgage scores for $1 to cut lender costs.
Mar 06	Investor recognition	Positive	-1.6%	Named as a BetterInvesting “Stock to Study” highlighting fundamentals for research.
Mar 03	Conference participation	Neutral	+0.1%	Announced attendance at three March 2026 investor conferences by senior IR.
Feb 26	Leadership appointment	Positive	+0.5%	Named David Smith President of U.S. Information Solutions post-cloud shift.
Feb 25	Dividend increase	Positive	+4.9%	Board authorized 12% dividend hike to $0.56 per share for Q1 2026.

Pattern Detected

Across the last 5 news events, EFX showed 3 aligned and 2 divergent price reactions versus news tone, indicating occasionally negative reactions to otherwise constructive announcements.

Recent Company History

Recent EFX news has centered on strategic initiatives and shareholder returns. On Feb 25, the board approved a 12% dividend increase to $0.56 per share, which saw a positive price reaction. Management changes, including a new President of U.S. Information Solutions effective Mar 2, 2026, and participation in multiple March investor conferences, underscored a post-cloud, EFX.AI-driven strategy. A mortgage affordability initiative and external recognition as a “Stock to Study” round out a pattern of operational and capital allocation updates leading into this security and AI-focused annual report.

Market Pulse Summary

This announcement underscores Equifax’s push to integrate AI into cybersecurity, from auto-resolving...

Analysis

This announcement underscores Equifax’s push to integrate AI into cybersecurity, from auto-resolving nearly 50% of SOC tickets to defending against 19.8 million daily threats, up 30% year over year. A NIST Cybersecurity Framework score of 4.4 and continued AI deployment build on earlier initiatives involving EFX.AI, new products, and dividend growth. Investors may watch future reports for changes in threat volumes, automation efficiency, and independent security benchmarks to gauge ongoing program maturity.

Key Terms

generative AI, Security Operations Center (SOC), deepfake, malware, +3 more

7 terms

generative AI technical

"building the architectural guardrails to secure the business's use of generative AI tools"

Generative AI is a type of computer technology that can create new content, like text, images, or music, on its own. It’s important because it can produce realistic and useful material quickly, which could change how we create art, write stories, or even develop new products. Think of it as a smart robot that can invent and produce things almost like a human.

Security Operations Center (SOC) technical

"helping auto-resolve nearly 50% of all Security Operations Center (SOC) tickets"

A security operations center (SOC) is a centralized team and facility that continuously watches over a company’s digital systems and data, detects suspicious activity, and responds to cyber incidents to keep operations running. Think of it as a 24/7 digital command center or neighborhood watch for a business; its effectiveness matters to investors because strong monitoring and rapid response reduce the risk of costly breaches, downtime, regulatory penalties, and damage to reputation, all of which can affect a company’s value.

deepfake technical

"intercepted live deepfake attacks targeting leadership and blocked evasive malware"

A deepfake is an audio or video created or altered by artificial intelligence to make someone appear to say or do things they never did; think of it as a highly convincing digital impersonation. For investors, deepfakes matter because they can trigger sudden swings in a company’s stock, spread false news, enable fraud or insider manipulation, and raise legal or reputation risks that affect a firm's value and regulatory exposure.

malware technical

"blocked evasive malware designed to bypass traditional filters"

Malware is malicious software that infiltrates computers, networks or devices to damage systems, steal or corrupt data, or disrupt normal operations — like a digital burglar or pest that sneaks in and tampers with a business’s tools and records. For investors, malware matters because attacks can cause service outages, lost sales, costly cleanup and legal penalties, erode customer trust, and create sudden, material risks to revenue and stock price.

cloud-native infrastructure technical

"Leveraging our cloud-native infrastructure, we're using the power of AI"

Cloud-native infrastructure is the set of computing tools and design patterns that let companies build, run and scale software directly on internet-based platforms rather than on fixed, physical servers. Think of it like renting flexible, modular office space that can expand, shrink or reconfigure instantly as needs change. For investors it matters because it can lower costs, speed product updates, improve reliability and give firms a competitive edge in reacting to market demand.

National Institute of Standards and Technology (NIST) regulatory

"a 2025 National Institute of Standards and Technology (NIST) Cybersecurity Framework score"

A U.S. federal agency that creates and maintains measurement, testing and cybersecurity standards used across industry, from how devices are measured to how data systems are secured. Investors care because NIST guidance acts like a common ruler or referee: following its standards can reduce regulatory risk, lower product certification costs, increase customer trust, and influence which technologies and companies gain market acceptance.

Cybersecurity Framework technical

"NIST Cybersecurity Framework score of 4.4, increased in 2025"

A cybersecurity framework is a structured set of practices, policies and technologies an organization uses to prevent, spot and respond to digital attacks—think of it as a building’s blueprint plus alarm system for protecting data and systems. Investors care because a robust framework lowers the risk of costly breaches, regulatory penalties and business interruptions, and it signals disciplined management that helps protect revenue, reputation and long‑term value.

AI-generated analysis. Not financial advice.

Sixth Annual Report Highlights AI-Accelerated Defenses, Security-Driven Business Innovation, and Continued Industry Collaboration

ATLANTA, March 18, 2026 /PRNewswire/ -- Equifax® (NYSE: EFX) today released its 2025 Security Annual Report, detailing a year of relentless optimization as the company leverages EFX.AI to power the future of the organization. The sixth annual report outlines how Equifax is navigating the intersection of AI and cybersecurity from three distinct angles: deploying AI to streamline its own defenses, building the architectural guardrails to secure the business's use of generative AI tools, and recalibrating its posture to mitigate adversarial AI threats.

"With our $3 billion global security and technology transformation and the creation of the Equifax Cloud™, principally complete, EFX.AI is powering the future of the New Equifax," said Mark W. Begor, CEO of Equifax. "Last year, we ramped the deployment of patented EFX.AI technology in our record number of New Product Innovations, leveraging the unique and proprietary data that sets Equifax apart in the industry. We also gained efficiencies by leveraging AI internally to spend less time on routine items and more time on the complex, creative, and collaborative challenges that drive our company forward. Our unwavering commitment to security sets a strong foundation for this innovation. We remain committed to being an industry leader in cybersecurity."

In 2025, Equifax defended against an average of 19.8 million cyber threats each day — a 30% increase from the prior year. With its cloud-native infrastructure and security-first culture, Equifax continued to optimize its security operations to meet this escalating threat volume while securing the business's use of AI for innovation.

Key highlights of the 2025 Equifax Security Annual Report include:

• Streamlining Security Operations: Equifax built and piloted a specialized AI triage agent that is now helping auto-resolve nearly 50% of all Security Operations Center (SOC) tickets, keeping its mean time to detect cyber threats below one minute.
   
• Enabling Frictionless Innovation: By implementing automated guardrails and custom AI advisory assistants, Equifax reduced security consult times by 61%. These and other optimizations enabled the secure launch of a record number of New Product Innovations (NPIs) in 2025.
   
• Defending Against Adversarial AI: As threat actors weaponized AI to increase the speed and sophistication of attacks, Equifax deployed adaptive external defenses that successfully intercepted live deepfake attacks targeting leadership and blocked evasive malware designed to bypass traditional filters.
   
• Leading Through Co-Innovation and Transparency: Equifax continued to drive industry standards by partnering directly with major endpoint, cloud, and identity vendors to shape and harden native security capabilities.

"When I joined Equifax in May 2025, I didn't find a security team taking a victory lap. I found a group with an intense drive to keep pushing forward," said Jeremy Koppen, Chief Information Security Officer of Equifax. "That mindset is critical right now. The threat landscape is moving at incredible speed, and you can't outwork that kind of scale manually. You have to out-engineer it. Leveraging our cloud-native infrastructure, we're using the power of AI in conjunction with our skilled analysts, putting in guardrails that let our workforce maximize AI tools to innovate securely at top speed. Ultimately, we're proving that top-tier security accelerates innovation."

The maturity of the Equifax cybersecurity program, with a 2025 National Institute of Standards and Technology (NIST) Cybersecurity Framework score of 4.4, increased in 2025 according to a leading global research and advisory firm, outperforming all major industry benchmarks for the sixth consecutive year. Equifax also maintained a security posture score that exceeded Technology and Financial Services industry averages.

Looking ahead, Equifax will continue evolving its defenses to outpace emerging threats and ensure that security remains a powerful accelerator of innovation.

View the complete 2025 Equifax Security Annual Report here.

ABOUT EQUIFAX INC.
At Equifax (NYSE: EFX), we believe knowledge drives progress. As a global data, analytics, and technology company, we play an essential role in the global economy by helping financial institutions, companies, employers, and government agencies make critical decisions with greater confidence. Our unique blend of differentiated data, analytics, and cloud technology drives insights to power decisions to move people forward. Headquartered in Atlanta and supported by nearly 15,000 employees worldwide, Equifax operates or has investments in 24 countries in North America, Central and South America, Europe, and the Asia Pacific region. For more information, visit Equifax.com.

FOR MORE INFORMATION:
Stacy Kirk for Equifax
MediaInquiries@equifax.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/equifax-releases-2025-security-annual-report-302716637.html

SOURCE Equifax Inc.

FAQ

What did Equifax (EFX) report about daily cyber threats in the 2025 Security Annual Report?

Equifax reported defending an average of 19.8 million cyber threats per day in 2025, a 30% increase year-over-year. According to the company, this rise drove accelerated investment in cloud-native defenses and AI-enabled security operations to handle higher volume and complexity.

How did Equifax (EFX) use AI to improve Security Operations Center performance in 2025?

Equifax deployed an AI triage agent that now auto-resolves nearly 50% of SOC tickets, keeping mean time to detect below one minute. According to the company, this reduced analyst workload and sped resolution of routine incidents while preserving expert focus on complex threats.

What is the size and status of Equifax's security and technology transformation (EFX) announced in 2025?

Equifax cited a $3 billion global security and technology transformation that is principally complete, including the Equifax Cloud. According to the company, the program underpins AI deployment and modernized infrastructure to support secure innovation.

How did Equifax (EFX) address adversarial AI and deepfake threats in 2025?

Equifax deployed adaptive external defenses that intercepted live deepfake attacks and blocked evasive malware. According to the company, these measures addressed increased adversarial AI sophistication and protected leadership and critical systems from AI-enabled threats.

What operational efficiency gains did Equifax (EFX) report in the 2025 Security Annual Report?

Equifax reported a 61% reduction in security consult times through automated guardrails and AI advisory assistants. According to the company, these efficiencies enabled faster product launches and safer use of generative AI across the business.

How did Equifax (EFX) score on cybersecurity maturity in 2025 and how does that compare to peers?

Equifax reported a 4.4 NIST Cybersecurity Framework score for 2025, outperforming major industry benchmarks for the sixth consecutive year. According to the company, this score reflects increased maturity and a security posture above Technology and Financial Services averages.