The plaintiffs say the company knew about the problem with "access tokens" for years and chose to protect its own employees before fixing the problem for users.
Not even 24 hours after the Georgia-based credit reporting company announced the incident, lawsuits were filed in federal courts in Georgia and Oregon.