One week after announcing a major data breach affecting over 143 million consumers, Equifax is pointing blame at a security vulnerability in the Apache Struts web framework. However, the vulnerability was publicly announced in March and a patch was available months before the attack.
https://www.notebookcheck.net/Equifax-security-breach-blamed-on-known-web-vulnerability-in-Apache-Struts.248550.0.html