San Francisco filed a lawsuit on Tuesday against Equifax, becoming the first city in the country to sue the credit reporting company over a massive data breach that exposed the personal information of about 143 million Americans.
The city's lawsuit in a California court accuses Equifax of violating state law by failing to implement reasonable security measures and not providing timely notice of the breach. It seeks tens of millions of dollars in civil penalties as well as restitution for some consumers.
"Equifax's incompetence would be comical if the subject matter weren't so serious," San Francisco City Attorney Dennis Herrera said in a statement. "This company fell asleep at the switch and upended the lives of millions of people."
Equifax declined to comment on the pending litigation, but says it remains focused on helping its customers.