How is their response "good"?
A special purpose sign-up site with a domain name (www.equifaxsecurity2017.com) that couldn't look more like a phishing site if it tried, offering one pathetic year of "you're fucked" notification and no compensation. And you're not even their customer in the first place!