Reuters reported that Equifax’s 2017 cyber incident where +147M consumers’ data was stolen included “costs mainly reflect technology and data security upgrades, legal fees, and free identity theft protection and credit monitoring offered to the more than 147 million consumers affected by the cyber security incident.”  The March 2, 2018 report entitled “Equifax expects $200 million in breach-related costs in 2018” reported a number of class action lawsuits:

…as well as investigations by U.S. federal, state, local and foreign governmental officials and agencies.

Seems like their estimate of $275M is on the low side when all is said and done!