By allowing this woman to have this job Equifax put millions of users personal information at risk including credit card and social security numbers.
Equifax has since been hit with at least 30 lawsuits and is being investigated by multiple states, US Congress and the Federal Bureau of Investigation.
Equifax said last week that it would likely need to contact fewer than 400,000 British consumers whose personal information may have been accessed in the breach.
According to Bloomberg, the department is looking at sales by Equifax Chief Financial Officer John Gamble, President of US Information Solutions Joseph Loughran, and President of Workforce Solutions Rodolfo Ploder.
The first incident reportedly affected a small number of outsiders and banking customers, who were notified of it in early March.
Schneiderman also wants to know whether the companies will consider waiving the fees for consumer credit freezes in light of the breach.
The supervisory agency of the credit has indicated to The canadian Press that it is working with the Office of the protection of the private life of Canada, which announced on Friday it has opened an investigation into the cyber attack.
Equifax is already facing criticism for the long delay between the May breach and its revelation to consumers that their data had been stolen, which came four months later.
"Equifax's Security organization was aware of this (CVE-2017-5638) vulnerability at that time, and took efforts to identify and to patch any vulnerable systems in the company's IT infrastructure", Equifax stated. In Canada, the numbers are not almost as certain as Equifax has not publicly disclosed any estimate.
Several state attorneys general have also said they would investigate, which could result in fines at the state level. The U.S. Federal Trade Commission and a Congressional committee with subpoena power recently joined the growing number of government bodies investigating the cyberattack.
According to the FTC, Equifax will not call you to verify your account information. "They're not from Equifax".