Item 4. CONTROLS AND PROCEDURES

As of the end of the period covered by this report, an evaluation was carried out by the Company’s management, with the participation of our Chief Executive Officer and Chief Financial Officer, of the effectiveness of our disclosure controls and procedures (as defined in Rule 13a-15(e) under the Securities Exchange Act of 1934). Based upon that evaluation, our Chief Executive Officer and Chief Financial Officer concluded that these disclosure controls and procedures were effective as of the end of the period covered by this report. In addition, no change in our internal control over financial reporting (as defined in Rule 13a-15(f) under the Securities Exchange Act of 1934) occurred during our most recent fiscal quarter that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

PART II. OTHER INFORMATION

ITEM 1. LEGAL PROCEEDINGS

FCRA Litigation

On August 3, 2022, a lawsuit was filed against us in the U.S. District Court for the Northern District of Georgia alleging violations of certain sections of the FCRA in connection with a previously-disclosed coding issue which impacted how some credit scores were calculated during a three-week period. In June 2026, Equifax and the plaintiffs’ attorneys who filed the lawsuit reached an agreement in principle to settle the claims at issue on a nationwide and class-wide basis. The parties have

filed a notice of settlement with the court. If the final terms of a settlement agreement cannot be agreed upon, or if the settlement is not ultimately approved by the court, Equifax believes it has valid defenses to this action and will continue to defend against the action.

Antitrust Litigation

On May 28, 2024, a lawsuit alleging violations of certain antitrust laws in connection with our Workforce Solutions business unit was filed against us in the Eastern District of Pennsylvania. The complaint seeks certification of a class of all persons who purchased electronic verification of income and employment services from May 28, 2020 to present and unspecified monetary damages, costs and attorneys’ fees. We dispute the allegations in the complaint and intend to defend against the claims.

CFPB Matters

In July 2023, we received a Civil Investigative Demand (a “CID”) from the Consumer Financial Protection Bureau (the “CFPB”) as part of its investigation into data accuracy and dispute handling at our Workforce Solutions business unit in order to determine whether we have followed the Fair Credit Reporting Act's requirements. We received a second CID from the CFPB in March 2024 and a third CID in August 2024 as part of the same investigation. The CIDs request the production of documents and answers to written questions. We are cooperating with the CFPB in its investigation and providing responses and information on an ongoing basis. At this time, we are unable to predict the outcome of the CFPB's investigation, including whether the investigation will result in any actions or proceedings against us.

Other

Equifax has been named as a defendant in various other legal actions, including administrative claims, regulatory matters, government investigations, class actions and other litigation arising in connection with our business. Some of the legal actions include claims for substantial compensatory or punitive damages or claims for indeterminate amounts of damages. We believe we have defenses to and, where appropriate, will contest many of these matters. Given the number of these matters, some are likely to result in adverse judgments, penalties, injunctions, fines or other relief. We may explore potential settlements before a case is taken through trial because of the uncertainty and risks inherent in the litigation process.

For information regarding our accounting for legal contingencies, see Note 6 of the Notes to Consolidated Financial Statements in this Form 10-Q.