Ethics statements fell very very flat
Have a read of the Equifax employee ethics standards (page 21 and page 22). A lot of corporate fluff about preserving IP and being careful not to expose confidential data and care with relations with customers. Paying customers, that is.
Absolutely nothing about the care and protection of personally-identifying-information. PII. Which is their whole business.