The Equifax breach fallout of what should be a drawn-out process, has already begun, including a class-action lawsuit filed on behalf of Oregon consumers and guidance for credit unions.

To recap: credit rating firm Equifax revealed a breach exploited a website weakness to access the personal information, including credit card and social security numbers, of as many as 143 million Americans. The Atlanta-based firm said it discovered that hackers accessed certain files from mid-May through July on July 29 but waited until Sept. 7 to warn consumers.

The data included names, social security numbers, birth dates, home addresses, and in some cases, driving license information. Equifax also disclosed 209,000 credit card numbers, and other personally identifiable information on 182,000 consumers, might now be available to hackers.