Equifax: credit bureau oligopoly and the Work Number's data moat

Executive overview

Equifax is known as a credit bureau, but its most valuable and fastest-growing asset is the Work Number — a database of income and employment records on 120 million Americans. The credit bureau side is a GDP-linked oligopoly with limited growth; the Work Number is a high-margin, near-monopoly with a long unit expansion runway.

The core insight: the business most investors associate with Equifax is not the one driving its future — the Work Number's exclusive data network is structurally harder to replicate than the credit bureau.

The credit bureau business

• Three-player oligopoly (Equifax, Experian, TransUnion) built on a give-to-get model: contribute borrowing data, pay to pull credit files.
• Network effects make a fourth entrant nearly impossible — no data to offer in exchange.
• Mortgage historically mandated a tri-merge (all three bureaus); a proposed shift to bi-merge would introduce price competition for the first time.
• Outside mortgage, creditors run a waterfall: 60–70% to one bureau, remainder to others; data is largely commoditised across all three.
• U.S. bureau growth tracks credit origination volumes — roughly GDP plus one to two points; higher in modernising credit economies internationally.
• USIS EBITDA margins fell from ~50% to mid-30s due to under-investment in IT and a full cloud migration to Google Cloud Platform; normalised margins expected closer to 40% post-migration.

The Work Number and Equifax Workforce Solutions

• Equifax Workforce Solutions (EWS) is the largest segment at ~45% of revenue and ~60% of EBITDA.
• The Work Number originated at TALX Corporation (acquired 2007), which started as an HR paperwork outsourcer; employers contributed payroll data to avoid fielding manual verification calls.
• The database holds 120 million records; roughly 95 million are exclusive to Equifax — direct corporate contributors (covering ~55 million workers) plus exclusive payroll processor partnerships.
• ADP (25 million records) is the single processor that shares with competitors; all others are exclusive to Equifax.
• Competitors: Experian (~10 million exclusive records), TrueWork (~5 million, backed by TransUnion). Both face a shrinking addressable pool as Equifax signs up more records.
• Equifax sits at the top of the verifier waterfall; even when ADP records are involved, Equifax captures the transaction because it is pinged first.
• Margin profile has mixed up from high-teens EBITDA (at acquisition) to north of 50% today as the high-margin verification revenue outgrows the low-margin BPO paperwork business.

Growth vectors for the Work Number

• Record growth: currently high-single to low-double digits annually; has grown 6–7% per year since 2007 acquisition; meaningful runway remains (135 million aggregated vs. 220 million Americans with income).
• Mortgage penetration: currently 60–65%; mandated by GSEs post-GFC but not yet at 100%.
• Talent penetration: currently 20–25%; distribution runs primarily through three public background screeners (First Advantage, HireRight, Sterling) with ~30–35% market share; new blue-collar SKUs expand addressable volume.
• Government penetration: currently 20–25%; highly fragmented across thousands of state and federal benefits agencies; primarily a sales motion.
• ASP uplift: Work Number increasingly bundles education credentials and incarceration records (90%+ coverage each), commanding higher price points.
• Combined, unit growth of 10%+ appears credible; total EWS including BPO likely grows mid-teens; whole company a low-double-digit grower.

The 2017 data breach and aftermath

• Data on 140 million Americans exfiltrated over several months — names, addresses, Social Security numbers; credit card data was not taken.
• Attributed to Chinese state-sponsored actors targeting U.S. government employees for espionage; large-scale identity fraud never materialised.
• Root causes: data stored unencrypted and unsegmented; an expired security monitoring tool meant the breach went undetected for months.
• Consequences: CEO Richard Smith ousted; ~$800 million in fines and consumer restitution; one insider trading charge.
• New CEO Mark Begor accelerated the strategic pivot to the Work Number and committed $1.5 billion to a full cloud rewrite (expected to complete ~2024), which should reduce capex intensity and lift margins.

Key risks

• Another breach remains unpredictable; data governance is structurally improved but the risk does not disappear.
• Bi-merge transition in mortgage could reduce bureau units and trigger price competition in the segment's highest-margin vertical.
• Equifax's aggressive pricing on the Work Number has created customer resentment; sustained price increases could slow adoption in talent and government.
• Cloud rewrite has run over time and budget; margin recovery thesis depends on its conclusion.
• Exclusive payroll contracts could attract antitrust scrutiny; regulatory risk is hard to size but not zero.