Nasiba Alhasaan
April 20, 2026
DIWAKAR YALPI
Cybersecurity and Social Sciences Case Study: The Equifax Data Breach.

Introduction
In 2017, Equifax experienced a major data breach that compromised the personal data of more
than 147 million individuals, marking it as a pivotal event in cybersecurity history. The Equifax
breach was caused by software vulnerability that hadn’t been fixed, but the consequences went
beyond just a simple technical problem. This incident shows how cybersecurity problems are
closely linked to how people act, the way companies are run, and how much trust people have in
institutions.

Analysis (Social Science Integration)
From a psychological point of view, human error was a big favor. Employees didn’t install a
crucial security update, which shows that being overwhelmed, not knowing enough, or not
having good training can create significant weakness. Also the risk of social engineering goes up
when people don’t get the right education about how to stay safe online.
Sociologically speaking the breach damaged the public’s trust in the organizations that are
supposed to protect sensitive information. Consumers depend on companies like Equifax without
being able to control their data directly, which creates an unequal situation. When these kinds of
incidents happen, it makes people worry about who is responsible and whether companies are
taking their duties seriously.
Anthropology can help us understand how a company culture played a part in the breach. If a
company has a weak security culture where cybersecurity isn’t a priority it can lead to
carelessness. If the leaders don’t stress the importance of security, employees probably won’t
follow the best security practices.

Proposed Solutions and Barriers
To really fix the problem, we need to use both technical and social methods. First, companies
should use automated systems to manage security, so they don’t have to rely as much on people.
Second, they should have regular training programs for employees that focus on teaching them
about cybersecurity and how to behave safely online. Third, companies should build a strong
security culture by making cybersecurity a shared responsibility for everyone, no matter their
positions.

But also there are obstacles. Employees might not want to do the training because they don’t
have time or aren’t interested. Companies might also struggle with money when they try to put
advanced security systems in place. To deal with these issues, companies can offer rewards for
taking part in training, make cybersecurity a part of the regular workday and set aside money
specifically for managing risks.

Reflection
This case shows that cybersecurity isn’t just about technology, it’s also about people and society.
It’s really important to understand human behavior, how society is structured, and how
companies are organized to prevent cyber incidents. Taking a broad, multidisciplinary approach
helps create solutions that are more effective and last longer.

Conclusion
The Equifax breach proves that when you combine cybersecurity with social sciences, you can
understand risks better and create better prevention strategies. It’s super important to deal with
both the weaknesses in technology and the human elements in today’s digital world.

References
Federal Trade Commission. (2019). Equifax data breach settlement.
Hadnagy, C. (2018). Social engineering: The science of human hacking. Wiley.
National Institute of Standards and Technology. (2020). Cybersecurity framework.

This case study examines a real-world cybersecurity incident and its impact. It shows how vulnerabilities in systems can be exploited by attackers. The case also highlights the importance of strong security measures, user awareness, and quick response to incidents. This case shows how even small security weaknesses can lead to major problems. Lessons learned from this case study can help prevent future cyber attacks and improve overall security.