The Journal, citing unnamed sources familiar with the matter, said the settlement could be announced as soon as Monday. Equifax declined to comment. The report says the deal would resolve investigations by the FTC, the Consumer Financial Protection Bureau and most state attorneys general. It would also resolve a nationwide consumer class-action lawsuit.
Spokesmen for the FTC and the CFPB didn't immediately return messages seeking comment Friday night. The breach was one of the largest affecting people's private information. Atlanta-based Equifax did not notice the attack for more than six weeks. The compromised data included Social Security numbers, birth dates, addresses, driver license numbers and credit card numbers.
The company said earlier this year that it had set aside around $700 million to cover anticipated settlements and fines.