hackers managed to get access to some of its internal data in mid-May by exploiting a vulnerable website application. They remained on the system until they were discovered on July 29.
On September 7th, Equifax publicly announces the security breach.
What took you so long ? Why do crackers get a month to do as they please before it gets announced ?