The Journal, citing unnamed sources familiar with the matter, said the settlement could be announced as soon as Monday. Equifax declined to comment.
The report says the deal would resolve investigations by the FTC, the Consumer Financial Protection Bureau and most state attorneys general. It would also resolve a nationwide consumer class-action lawsuit.
The breach was one of the largest affecting people’s private information.
Atlanta-based Equifax did not notice the attack for more than six weeks.
The compromised data included Social Security numbers, birth dates, addresses, driver license numbers and credit card numbers.
Copyright © 2019 by The Associated Press. All Rights Reserved.