Equifax claries that its system is not compromised; third-party vendors are running malicious code on the website

Equifax said it has removed the vendor’s code from the web page, which was taken offline so the company can conduct further analysis. Equifax Inc said on Thursday that one of its third-party vendors had been running malicious code on one its web pages, but that the credit reporting agency was not the subject of another cyber attack and its systems were not compromised. Equifax had said earlier it took the affected web page offline “out of an abundance of caution” following a report by the technology news website Ars Technica that the company’s website may have been hacked. “The issue involves a third-party vendor that Equifax uses to collect website performance data, and that vendor’s code running on an Equifax website was serving malicious content.” The company said it has removed the vendor’s code from the web page, which was taken offline so the company can conduct further analysis. Randy Abrams, an independent security analyst, said he noticed the issue late on Wednesday when he was attempting to check some information in his credit report and a bogus pop-up ad appeared on Equifax’s website.