It is more:
- Critical remote execution bug was discovered in Struts2.
- The vulnerability goes public too quickly.
- Hackers start scanning the Internet
- Equifax is found vulnerable.
- Vulnerability is exploited.
If the $14 billion can't do that then they certainly cannot protect data.