Equifax Releases 2025 Security Annual Report

Equifax (NYSE: EFX) released its 2025 Security Annual Report on March 18, 2026, highlighting AI-driven defenses, security-enabled product innovation, and industry collaboration.

Rhea-AI Summary

Equifax (NYSE: EFX) released its 2025 Security Annual Report on March 18, 2026, highlighting AI-driven defenses, security-enabled product innovation, and industry collaboration.

Key metrics include a $3 billion global security and technology transformation, defense against 19.8 million daily threats (+30% YoY), ~50% SOC ticket auto-resolution, 61% faster security consults, and a 4.4 NIST cybersecurity framework score.

Positive

• $3 billion global security and technology transformation principally complete
• Defended against 19.8 million cyber threats per day (a 30% increase)
• AI triage agent auto-resolves nearly 50% of SOC tickets
• Security consult times reduced by 61%
• Achieved a 4.4 NIST cybersecurity framework score, outperforming industry benchmarks

Negative

• Threat volume rose 30% year-over-year, increasing operational pressure
• Adversarial AI attacks (including live deepfakes) targeted leadership, signaling elevated threat sophistication
• Threat actors weaponized AI to increase attack speed and sophistication

Argus Mar 18 session

-1.88% close to close Open Argus

Details

News Market Reaction – EFX

On Mar 18, the day this news came out, EFX closed 1.88% below the previous close.

Data tracked by StockTitan Argus for the Mar 18 session.

Key Figures

Security & tech transformation: $3 billion Daily cyber threats: 19.8 million per day Threat volume increase: 30% +4 more

Security & tech transformation

$3 billion

Global security and technology transformation program referenced as principally complete

Daily cyber threats

19.8 million per day

Average number of cyber threats defended against in 2025

Threat volume increase

30%

Increase in average daily cyber threats vs prior year

SOC tickets auto-resolved

Nearly 50%

Share of Security Operations Center tickets handled by AI triage agent

Security consult time reduction

61%

Reduction in security consult times via automated guardrails and AI assistants

Annual report count

Sixth annual

Sixth Equifax Security Annual Report released for 2025

NIST CSF score

4.4

2025 NIST Cybersecurity Framework maturity score for Equifax program

Historical Context

5 past events · Latest: Mar 09

5 events

1. Mar 09

   Mortgage affordability push

   24h Move

   -4.2%

   Offered VantageScore 4.0 mortgage scores for $1 to cut lender costs.

2. Mar 06

   Investor recognition

   24h Move

   -1.6%

   Named as a BetterInvesting “Stock to Study” highlighting fundamentals for research.

3. Mar 03

   Conference participation

   24h Move

   +0.1%

   Announced attendance at three March 2026 investor conferences by senior IR.

4. Feb 26

   Leadership appointment

   24h Move

   +0.5%

   Named David Smith President of U.S. Information Solutions post-cloud shift.

5. Feb 25

   Dividend increase

   24h Move

   +4.9%

   Board authorized 12% dividend hike to $0.56 per share for Q1 2026.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Key Terms

generative AI, Security Operations Center (SOC), deepfake, malware, +3 more

7 terms

generative AI technical

"building the architectural guardrails to secure the business's use of generative AI tools"

Generative AI is a type of computer technology that can create new content, like text, images, or music, on its own. It’s important because it can produce realistic and useful material quickly, which could change how we create art, write stories, or even develop new products. Think of it as a smart robot that can invent and produce things almost like a human.

Security Operations Center (SOC) technical

"helping auto-resolve nearly 50% of all Security Operations Center (SOC) tickets"

A security operations center (SOC) is a centralized team and facility that continuously watches over a company’s digital systems and data, detects suspicious activity, and responds to cyber incidents to keep operations running. Think of it as a 24/7 digital command center or neighborhood watch for a business; its effectiveness matters to investors because strong monitoring and rapid response reduce the risk of costly breaches, downtime, regulatory penalties, and damage to reputation, all of which can affect a company’s value.

deepfake technical

"intercepted live deepfake attacks targeting leadership and blocked evasive malware"

A deepfake is an audio or video created or altered by artificial intelligence to make someone appear to say or do things they never did; think of it as a highly convincing digital impersonation. For investors, deepfakes matter because they can trigger sudden swings in a company’s stock, spread false news, enable fraud or insider manipulation, and raise legal or reputation risks that affect a firm's value and regulatory exposure.

malware technical

"blocked evasive malware designed to bypass traditional filters"

Malware is malicious software that infiltrates computers, networks or devices to damage systems, steal or corrupt data, or disrupt normal operations — like a digital burglar or pest that sneaks in and tampers with a business’s tools and records. For investors, malware matters because attacks can cause service outages, lost sales, costly cleanup and legal penalties, erode customer trust, and create sudden, material risks to revenue and stock price.

cloud-native infrastructure technical

"Leveraging our cloud-native infrastructure, we're using the power of AI"

Cloud-native infrastructure is the set of computing tools and design patterns that let companies build, run and scale software directly on internet-based platforms rather than on fixed, physical servers. Think of it like renting flexible, modular office space that can expand, shrink or reconfigure instantly as needs change. For investors it matters because it can lower costs, speed product updates, improve reliability and give firms a competitive edge in reacting to market demand.

National Institute of Standards and Technology (NIST) regulatory

"a 2025 National Institute of Standards and Technology (NIST) Cybersecurity Framework score"

A U.S. federal agency that creates and maintains measurement, testing and cybersecurity standards used across industry, from how devices are measured to how data systems are secured. Investors care because NIST guidance acts like a common ruler or referee: following its standards can reduce regulatory risk, lower product certification costs, increase customer trust, and influence which technologies and companies gain market acceptance.

Cybersecurity Framework technical

"NIST Cybersecurity Framework score of 4.4, increased in 2025"

A cybersecurity framework is a structured set of practices, policies and technologies an organization uses to prevent, spot and respond to digital attacks—think of it as a building’s blueprint plus alarm system for protecting data and systems. Investors care because a robust framework lowers the risk of costly breaches, regulatory penalties and business interruptions, and it signals disciplined management that helps protect revenue, reputation and long‑term value.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Sixth Annual Report Highlights AI-Accelerated Defenses, Security-Driven Business Innovation, and Continued Industry Collaboration

ATLANTA, March 18, 2026 /PRNewswire/ -- Equifax® (NYSE: EFX) today released its 2025 Security Annual Report, detailing a year of relentless optimization as the company leverages EFX.AI to power the future of the organization. The sixth annual report outlines how Equifax is navigating the intersection of AI and cybersecurity from three distinct angles: deploying AI to streamline its own defenses, building the architectural guardrails to secure the business's use of generative AI tools, and recalibrating its posture to mitigate adversarial AI threats.

"With our $3 billion global security and technology transformation and the creation of the Equifax Cloud™, principally complete, EFX.AI is powering the future of the New Equifax," said Mark W. Begor, CEO of Equifax. "Last year, we ramped the deployment of patented EFX.AI technology in our record number of New Product Innovations, leveraging the unique and proprietary data that sets Equifax apart in the industry. We also gained efficiencies by leveraging AI internally to spend less time on routine items and more time on the complex, creative, and collaborative challenges that drive our company forward. Our unwavering commitment to security sets a strong foundation for this innovation. We remain committed to being an industry leader in cybersecurity."

In 2025, Equifax defended against an average of 19.8 million cyber threats each day — a 30% increase from the prior year. With its cloud-native infrastructure and security-first culture, Equifax continued to optimize its security operations to meet this escalating threat volume while securing the business's use of AI for innovation.

Key highlights of the 2025 Equifax Security Annual Report include:

• Streamlining Security Operations: Equifax built and piloted a specialized AI triage agent that is now helping auto-resolve nearly 50% of all Security Operations Center (SOC) tickets, keeping its mean time to detect cyber threats below one minute.
   
• Enabling Frictionless Innovation: By implementing automated guardrails and custom AI advisory assistants, Equifax reduced security consult times by 61%. These and other optimizations enabled the secure launch of a record number of New Product Innovations (NPIs) in 2025.
   
• Defending Against Adversarial AI: As threat actors weaponized AI to increase the speed and sophistication of attacks, Equifax deployed adaptive external defenses that successfully intercepted live deepfake attacks targeting leadership and blocked evasive malware designed to bypass traditional filters.
   
• Leading Through Co-Innovation and Transparency: Equifax continued to drive industry standards by partnering directly with major endpoint, cloud, and identity vendors to shape and harden native security capabilities.

"When I joined Equifax in May 2025, I didn't find a security team taking a victory lap. I found a group with an intense drive to keep pushing forward," said Jeremy Koppen, Chief Information Security Officer of Equifax. "That mindset is critical right now. The threat landscape is moving at incredible speed, and you can't outwork that kind of scale manually. You have to out-engineer it. Leveraging our cloud-native infrastructure, we're using the power of AI in conjunction with our skilled analysts, putting in guardrails that let our workforce maximize AI tools to innovate securely at top speed. Ultimately, we're proving that top-tier security accelerates innovation."

The maturity of the Equifax cybersecurity program, with a 2025 National Institute of Standards and Technology (NIST) Cybersecurity Framework score of 4.4, increased in 2025 according to a leading global research and advisory firm, outperforming all major industry benchmarks for the sixth consecutive year. Equifax also maintained a security posture score that exceeded Technology and Financial Services industry averages.

Looking ahead, Equifax will continue evolving its defenses to outpace emerging threats and ensure that security remains a powerful accelerator of innovation.

View the complete 2025 Equifax Security Annual Report here.

ABOUT EQUIFAX INC.
At Equifax (NYSE: EFX), we believe knowledge drives progress. As a global data, analytics, and technology company, we play an essential role in the global economy by helping financial institutions, companies, employers, and government agencies make critical decisions with greater confidence. Our unique blend of differentiated data, analytics, and cloud technology drives insights to power decisions to move people forward. Headquartered in Atlanta and supported by nearly 15,000 employees worldwide, Equifax operates or has investments in 24 countries in North America, Central and South America, Europe, and the Asia Pacific region. For more information, visit Equifax.com.

FOR MORE INFORMATION:
Stacy Kirk for Equifax
MediaInquiries@equifax.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/equifax-releases-2025-security-annual-report-302716637.html

SOURCE Equifax Inc.

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What did Equifax (EFX) report about daily cyber threats in the 2025 Security Annual Report?

Equifax reported defending an average of 19.8 million cyber threats per day in 2025, a 30% increase year-over-year. According to the company, this rise drove accelerated investment in cloud-native defenses and AI-enabled security operations to handle higher volume and complexity.

How did Equifax (EFX) use AI to improve Security Operations Center performance in 2025?

Equifax deployed an AI triage agent that now auto-resolves nearly 50% of SOC tickets, keeping mean time to detect below one minute. According to the company, this reduced analyst workload and sped resolution of routine incidents while preserving expert focus on complex threats.

What is the size and status of Equifax's security and technology transformation (EFX) announced in 2025?

Equifax cited a $3 billion global security and technology transformation that is principally complete, including the Equifax Cloud. According to the company, the program underpins AI deployment and modernized infrastructure to support secure innovation.

How did Equifax (EFX) address adversarial AI and deepfake threats in 2025?

Equifax deployed adaptive external defenses that intercepted live deepfake attacks and blocked evasive malware. According to the company, these measures addressed increased adversarial AI sophistication and protected leadership and critical systems from AI-enabled threats.

What operational efficiency gains did Equifax (EFX) report in the 2025 Security Annual Report?

Equifax reported a 61% reduction in security consult times through automated guardrails and AI advisory assistants. According to the company, these efficiencies enabled faster product launches and safer use of generative AI across the business.

How did Equifax (EFX) score on cybersecurity maturity in 2025 and how does that compare to peers?

Equifax reported a 4.4 NIST Cybersecurity Framework score for 2025, outperforming major industry benchmarks for the sixth consecutive year. According to the company, this score reflects increased maturity and a security posture above Technology and Financial Services averages.