Financial Services Provider Equifax Deploys AI Against Cyberattacks

Notice: This article was created with AI.

What’s It About?

The US financial services provider Equifax has considerably expanded its cybersecurity strategy and is relying more heavily on artificial intelligence in the process. Jeremy Koppen has been heading the security department as Chief Information Security Officer since May 2025. With this, the company is responding to a marked increase in cyberattacks and is using AI technologies to automate its defensive measures. Almost 20 million threats are fended off every day, while the automation of incident tickets in the Security Operations Center has been raised to 50 percent.

Background & Context

The new security strategy stands in the context of a serious cyberattack in 2017, which by the company’s own account cost Equifax around 1.4 billion dollars. The incident was triggered by deficient patch management, an expired certificate and inadequate governance structures. Nine years later the company finds itself confronted with new challenges: the attack volume has risen by around 30 percent, while companies at the same time have less time to close known vulnerabilities.

Equifax deploys AI specifically in the Security Operations Center in order to process alerts and carry out security scans. The automation allows human analysts to concentrate on critical cases. Beyond that, the company has implemented a passwordless strategy that covers all 22,000 employees and has been extended to partner companies in order to minimize social engineering attacks. Quantitative risk analysis tools provide a comprehensive overview of operational risks, while AI is also used for code reviews in software development.

What Does This Mean?

The automation of security processes through AI allows Equifax to respond to the heightened threat situation and to deploy human resources in a more targeted way.
The extension of the passwordless strategy to partner companies shows that security measures increasingly have to be coordinated across company boundaries.
The use of quantitative risk analyses links technical security measures with strategic business planning and makes cyber risks more tangible for management.
Equifax’s experiences make clear that fundamental security measures such as patch management remain decisive in the age of AI as well.