Just to make sure that we aren't all talking past each other...
1. I assume the FBI is investigating the hack itself (who did it, etc.). Citation?
2. I assume the SEC is investigating the suspicious timing the executives who were selling stock before the announcement. I'd also assume it could turn into a criminal investigation. Cite?
3. The class action suit is a civil action asserting that Equifax was negligent (that's what the Bloomberg article that these comments are currently pointing to is about).
4. There could be criminal negligence in securing their networks. It seems like that could be either of a Federal or state issue. Anyone know if this investigation would take place with the FBI, or if there is another federal agency which would take the lead on that?
I can tell because criminal cases are prosecuted by the state; civil cases are prosecuted by private parties. (And class action is always civil.)
But by all means, move to somewhere less dumpster-firey where large businesses and governments don't get hacked.