The BBC are rightly asking:

  1. How many UK names are in the Equifax databases?
  2. Has any of their information has been accessed?
  3. What is the company's advice?

It's situations like this that have driven the EU to bring in the General Data Protection Regulation (GDPR). 

For an organisation the size of Equifax, which reported an annual revenue of around $3bn in 2016, the fine could be as high as $120m if the GDPR were enforceable today.