New York (CNN)Credit reporting agency Equifax is nearing a deal to pay about $700 million to state and federal regulators to settle probes stemming from a data breach that exposed the personal information of nearly 150 million people, according to two published reports.
The hack, the largest in US history, exposed sensitive information, including names, Social Security numbers, drivers’ license numbers and addresses.
The deal with the Federal Trade Commission, the Consumer Financial Protection Bureau and most state attorneys general also requires more changes to how Equifax handles private user data, according to the reports. It could be announced as early as Monday.
Equifax did not immediately respond to CNN Business’ request for comment.
Hackers leveraged a security flaw in a tool designed to build web applications to steal customer data. Equifax admitted it was aware of the security flaw a full two months before the company says hackers first accessed its data.
It has said its damages exceeded $350 million.
The data breach prompted the resignation of CEO Richard Smith and investigations by federal regulators, multiple states attorneys general and the company faces a number of civil lawsuits.