Sources: DoJ has opened a criminal investigation into three Equifax executives' stock sales that occurred days after the historic data breach was discovered
Context & Ripple Effects
The DoJ investigation escalates what began as a disclosure question into a criminal one. Bloomberg had already reported that three Equifax executives including the CFO sold roughly $1.8M in shares days after the breach was found, with no filings listing the transactions as scheduled sales — the exact pattern insider-trading probes target. The timing matters because Equifax says it discovered a major intrusion in March and claims it is unrelated to the disclosed hack affecting 143M people, while a source says both involve the same intruders.
The DoJ is not acting alone: the FTC made a rare public confirmation it is investigating the hack, and House committees plus the New York attorney general opened their own probes days earlier. Criminal exposure for individual executives is the new layer on top of an already multi-front regulatory response.
First-order effects
- The three executives who sold shares — including the CFO — now face potential criminal charges rather than just civil or reputational risk, and Equifax's legal defense expands to cover individual officers.
- Equifax must respond to parallel inquiries from the DoJ, FTC, congressional committees, and the New York attorney general simultaneously, multiplying disclosure obligations and counsel costs.
Second-order effects
- Public companies handling breach disclosures will face pressure to document pre-planned trading programs for insiders, since unscheduled sales inside the discovery-to-disclosure window now invite criminal scrutiny.
- Directors and officers at breached firms can expect boards and insurers to tighten blackout rules around security incidents, raising the personal cost of executive share sales during incident response.
Third-order effects
- If the pattern holds, major data breaches become criminal matters aimed at individuals as well as corporate civil penalties — shifting breach response from a compliance exercise to one where executive trading records are evidence.
- The gap between internal discovery and public disclosure becomes the legally dangerous window, pushing companies toward faster disclosure norms to protect executives from insider-trading exposure.
The trend: Data breaches are being treated as criminal cases that reach individual executives, with the discovery-to-disclosure window becoming the focal point of enforcement.