What else has Equifax not disclosed yet?