Risk Sleuth
EFX · 10-K filed 19 Feb 2026 · year to 31 Dec 2025

Equifax

29 named things its latest annual report says its results depend on, each in the company's own words. 18 of them are also named by other companies we've read.

Customers

U.S. federal, state and local governments

earns fromnamed as a risk
We derive a meaningful portion of our revenue from direct and indirect sales to U.S. federal, state and local governments, as well as foreign governments, and their respective agencies.Risk factors (Item 1A)

Also named by DELL, FISV, VZ

U.K. government

earns from
In the U.K., this includes a contract to provide these services to the U.K. government.Business (Item 1)

Suppliers

Cloud service providers

depends onnamed as a risk
Our information technology applications and systems consist primarily of outsourced, cloud-based infrastructure, platforms and software-as-a-service solutions not under our direct management or control.Risk factors (Item 1A)

Also named by ALLY, BAC, BX, C, HLT, IDXX, LNC, MSCI and 5 more

Credit-scoring algorithm licensors

depends onnamed as a risk
In addition, a significant portion of our revenue is derived from products and services that incorporate intellectual property licensed from key business partners.Risk factors (Item 1A)

Partners and platforms

National Cable, Telecommunications and Utility Exchange (NCTUE)

depends onnamed as a risk
This data includes the widespread and voluntary contribution of credit data from most lenders in the U.S. and many other markets as well as the contribution of data under proprietary contractual agreements, such as employers’ contribution of employment and income data to The Work Number® and telecommunications, cable and utility companies’ contribution of payment and fraud data to the National Cable, Telecommunications and Utility Exchange, Inc. (NCTUE) database we manage.Risk factors (Item 1A)

Other companies

$1.5 billion revolving credit facility

$1.5 billionnamed as a risk
A downgrade in our credit ratings would increase the cost of borrowings under our commercial paper program and $1.5 billion revolving credit facility, and could limit or, in the case of a significant downgrade, preclude our ability to issue commercial paper.Risk factors (Item 1A)

Competitors

Experian

competes withnamed as a risk
Online Information Solutions also includes our mortgage solutions products, offered in the U.S., which includes specialized credit reports that combine information from the three major consumer reporting agencies (Equifax, Experian and TransUnion) into a single “merged” credit report in an online format, commonly referred to as a tri-merge report.Business (Item 1)

Also named by FICO, TRU

Places

International markets (outside U.S.)

earns from · 23% of our total revenue in 2025named as a risk
Sales outside the U.S. comprised 23% of our total revenue in 2025.Risk factors (Item 1A)

Also named by ABNB, ADSK, BSX, CROX, CRWD, DOCU, DXCM, FICO and 18 more

U.S. mortgage market

earns fromnamed as a risk
Any weakening in the U.S. mortgage market resulting in a significant reduction in mortgage originations could have a corresponding negative impact on revenue and operating profit for our business, primarily within the Workforce Solutions and USIS operating segments.Risk factors (Item 1A)

Also named by FICO

Mexico

operates in
Our consumer products are the primary source of revenue in each of the countries in this region in which we operate, with the exception of Mexico where debt management services constitute the core of the business.Business (Item 1)

Also named by AAP, AME, AMRC, ANET, AOS, ARES, AYI, AZO and 83 more

Vermont

subject to
The state of Vermont is grandfathered under the original FCRA requirements and thus we are subject to additional requirements to comply with Vermont law.Business (Item 1)

Commodities and inputs

U.S. dollar exchange rates

exposed to its price · $139.4 millionnamed as a risk
For the year ended December 31, 2025, a 10% weaker U.S. dollar against the currencies of all foreign countries in which we had operations during 2025 would have increased our revenue by $139.4 million and our pre-tax operating profit by $13.8 million.Market risk (Item 7A)

Also named by TRU, WDC, WLFC

Regulators

Consumer Financial Protection Bureau (CFPB)

subject to · up to $1.0 million per day for known violationsnamed as a risk
The CFPB has in the past, and may in the future, initiate enforcement actions against us with regard to our compliance with federal consumer financial protection laws.Risk factors (Item 1A)

Also named by ABNB, AFRM, ALLY, AN, AUB, AXP, BAC, CASH and 61 more

Federal Trade Commission (FTC)

subject tonamed as a risk
Under the FTC Act, the FTC’s jurisdiction includes the ability to bring enforcement actions based on the security measures we employ to safeguard the personal data of consumers.Business (Item 1)

Also named by AMZN, AN, AVGO, BJ, CART, CELH, CHD, CHE and 56 more

Federal banking agencies third-party risk guidance

subject tonamed as a risk
In light of this guidance, our existing or potential bank and financial services customers subject to this guidance may continue to revise their third-party risk management policies and processes and the terms on which they do business with us, which may adversely affect our relationships with such customers and/or increase our expenses in servicing such customers.Risk factors (Item 1A)

Financial Conduct Authority (FCA)

subject to
Our core credit reporting and debt collections services and recovery management businesses in the U.K. are subject to FCA supervision.Business (Item 1)

Also named by AFRM, AJG, AMG, AMP, BGC, BRO, CBOE, COF and 17 more

New York State Department of Financial Services (NYDFS)

subject to
The New York State Department of Financial Services (“NYDFS”) has enacted extensive regulatory requirements applicable to CRAs that require registration with that agency, prohibit unfair and deceptive consumer practices and require compliance with significant portions of the NYDFS cybersecurity rules.Business (Item 1)

Also named by AFL, AIG, AMP, BPOP, COIN, FNF, GS, HOOD and 9 more

Reserve Bank of India

subject to
Our Indian business is also subject to regulation by the Reserve Bank of India, which is India’s central banking institution.Business (Item 1)

Also named by AXP

Office of the Australian Information Commissioner (OAIC)

subject to
The Office of the Australian Information Commissioner (“OAIC”) is the regulator with direct responsibility for administering the Australian Privacy Act 1988, which incorporates the Australian Privacy Principles (which relate to the collection, holding, use and disclosure of personal information) and Part IIIA of the Privacy Act 1988 (which regulates credit reporting).Business (Item 1)

Laws and programs

General Data Protection Regulation (GDPR)

subject to · up to 4% of annual worldwide “turnover”named as a risk
For example, in Europe, the GDPR, which includes extensive regulations for certain security incidents, could result in fines of up to 4% of annual worldwide “turnover” (a measure similar to revenues in the U.S.).Risk factors (Item 1A)

Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more

Affordable Care Act

subject tonamed as a risk
In addition, if the federal government changes the employer mandate or tax form requirements of the Patient Protection and Affordable Care Act, our Affordable Care Act Management Service may be impacted.Business (Item 1)

Also named by ABBV, ABT, ADP, AFL, BBSI, BRO, BWIN, COR and 8 more

Fair Credit Reporting Act (FCRA)

subject tonamed as a risk
The FCRA contains an attorney fee shifting provision that provides an incentive for consumers to bring individual and class action lawsuits against a consumer reporting agency for violation of the FCRA, and the number of consumer lawsuits (both individual and class action) against us alleging a violation of the FCRA and our resulting costs associated with resolving these lawsuits have increased substantially over the past several years.Risk factors (Item 1A)

Also named by ADP, FICO, FIS, FISV, PAYC, TRU, VRSK

Work Opportunity Tax Credit

subject tonamed as a risk
The Tax Management Services business within our Employer Services business is potentially impacted by changes in renewal or non-renewal of U.S. federal and state tax laws or interpretations, for example, those pertaining to work opportunity tax credits and unemployment compensation claims.Business (Item 1)

Also named by DG

E-Verify

subject tonamed as a risk
For instance, if the federal government or a state government mandates the use of E-Verify or changes the requirements for individuals to work in the U.S., our I-9 service may be impacted.Business (Item 1)

Also named by IBP

2017 Consumer Settlement (MDL No. 2800)

subject tonamed as a risk
To the extent we are unable to comply or we are viewed as not being in compliance with these business practice commitments or other requirements of a relevant order, we could face an enforcement action or contempt proceeding that could potentially result in fines, penalties and new business practice commitments, which, depending on the amount and type, could have a material adverse effect on our financial condition.Risk factors (Item 1A)

Gramm-Leach-Bliley Act (GLBA)

subject to
We are subject to various GLBA provisions, including rules relating to the use or disclosure of the underlying data and rules relating to the physical, administrative and technological protection of non-public personal financial information.Business (Item 1)

Also named by BR, CINF, FICO, FIS, FITB, OMF, ORI, PAYC and 4 more

Chile Law No. 21.719

subject to
For example, Chile enacted Law No. 21.719, which becomes fully enforceable in December 2026 and establishes a Personal Data Protection Agency and introduces rigorous requirements for data portability, breach notification and cross-border transfers.Business (Item 1)

Consumer Data Right (Australia)

subject to
The ACCC also administers the Consumer Data Right legislation, which mandates the supply by banks of comprehensive credit information to credit reporting bodies, including Equifax.Business (Item 1)

Technology

The Work Number

depends on · over 4 million organizations
We rely on payroll data received from over 4 million organizations to provide up-to-date verifications.Business (Item 1)