You're angry and you should be. But this rabbit-hole is a lot deeper than some guys at Equifax - in short, Equifax doesn't owe you, the consumer, anything. They aren't charged with protecting you, like the way a cop has a duty to protect you from a criminal, or a soldier is charged not to aid and comfort the enemy. Equifax has all their data because banks, whom you entrust with your money and from whom you borrow money, give it to them. They store it, perform analytics on it, and sell it back to the banks so they can decide whether you are a good credit risk or not.
That's it. And it's worked so well for making it easy to get a car loan approved that they seem like they've been around forever, like a State or Federal Agency that has responsibilities codified in law. But it ain't so. Equifax is just a corporation, selling a service, a B2B service at that. They don't owe anything to anyone except their shareholders and their customers, who ain't you. If they get sued by normal-people, that's what they're gonna say and it's gonna stick. Worse, the data breach doesn't make their data on you less reliable to the banks for looking you up to determine whether to give you a credit card, so they can just keep on cookin'.
So, what's all this mean? Why is your SSN and personal info now in the hands of the Russians, the North Koreans, the Albanian Mob or whoever else bought a piece? The banks you use, to buy stuff you can't afford to pay for in cash, sold you and every other American out, years, years ago, so that we could enjoy things like credit cards and 0% interest for the first six months on that brand new Chevy. We the People, in the form of our elected government, let this slide, slide, slide, even as the data they accumulated got larger and larger, because it made consumer-credit so damn easy, and keep the economy hummin'. Your granddad had to beg and plead and give up a pint of blood to get a loan at shark prices. These days, we're pre-approved at 1.9% because Equifax and its ilk have stored, for the banks' consumption, everything there is about whether you're a good credit risk.
Security was never their top concern. Data volume, the accuracy that results therefrom, and speed of delivery is what they sell. If someone copies/steals their data, so what? As far as banks are concerned, the data is out of date the moment it's stolen... as long as Equifax keeps collecting, their data is valuable to banks. Machine keeps turning, profits keep coming in. If someone had corrupted their data, made bad credit risks look like good ones, then Equifax might have had a problem, because their data wouldn't jibe with competitors TransUnion and Experian, and banks won't pay. But to have it stolen one time? Meh, so long as they keep collecting more and issuing credit scores.
So, nobody's going to hang from a yard-arm for this. Equifax's duty is to their customers (banks), and the stealing of their data is an inconvenience only insofar as banks have to cover for a lot of new, fraudulent transaction attempts made with the stolen data, yet to be seen. You, OTOH, Mr. Consumer? You're on your own. Somewhere in the fine print of those papers you signed to get your Visa card is the clause that permitted your bank to sell your data to Equifax, TransUnion, Experian, and whoever else they need to tell the good credit risks from the bad ones. Don't like it? Quit credit and banks and use only cash - or vote for politicians who are really big on regulating the banking industry (hint: they're the ones without any campaign funds).