Equifax hires Jamil Farshchi as its chief information security officer; Farshchi was previously Home Depot's CISO and held similar roles at Time Warner, Visa
AnnaMaria Andriotis / Wall Street Journal :
Context & Ripple Effects
Equifax has been rebuilding its entire executive layer since the 2017 breach: CSO Susan Mauldin and CIO David Webb were pushed into immediate retirement days after the disclosure, and CEO Richard Smith followed with his own abrupt resignation. The CISO seat has effectively been vacant since Mauldin's exit.
Jamil Farshchi fills it with someone who has run security through a breach before — he was Home Depot's CISO and held the top security job at Time Warner and Visa. The hire matters because the Experian record shows how fast a bureau's security posture decays when experienced security leadership leaves: former employees said Experian's improvements slipped after CIO John Finch departed.
First-order effects
- Equifax closes its most conspicuous post-breach leadership gap, putting a CISO with prior breach-response experience at Home Depot in charge of security roughly five months after Mauldin's exit.
Second-order effects
- The other credit bureaus now face the same benchmark: with Experian's post-departure security slippage documented publicly, rivals must show continuity in security leadership or invite the same scrutiny Equifax earned.
Third-order effects
- Post-breach companies are converging on a playbook — clear out the security and technology bench, then recruit executives with scar tissue from prior breaches — which tightens the market for proven CISOs and makes breach experience itself a hiring credential.
The trend: Major breach victims are treating security leadership as a board-level rebuild, cycling in CISOs whose value is measured by the incidents they have already survived.