Most of the security higher-ups at Equifax interviewed for this report seem pretty humble. Most admitted they made some mistakes and oversights that allowed a publically accessible Apache Struts server containing so much private data to go unpatched for months leading to the massive breach. The "former Countermeasures Manager" appears to have learned nothing from the breach however.

> The former Countermeasures Manager at Equifax served in an acting and then permanent capacity from 2016 to 2017. He believed Equifax suffered a cybersecurity breach because of a “sophisticated” and “highly motivated” adversary. He added that, “if asset management was a perfect silver bullet then perhaps this may not have happened.” He told Subcommittee staff that he does not think the Countermeasures team could have done anything differently in response to the March 2017 vulnerability. He was as surprised as anyone that Equifax suffered a breach because of the “combination of the sophistication of the attack and the talent at Equifax. We had rock stars at Equifax who were de facto pillars in the field.” The former Countermeasures Manager believes the response to the vulnerability was “not only defensible, but justifiable.”