The credit bureau Equifax said Monday the information of 145.5M Americans, was implicated in this summer’s breach.

Equifax suffered another breach of its systems, back in March, the company revealed Monday.

Equifax divulged on Wednesday that the culprit behind this summer’s breach of 143 million Americans was an Apache Struts vulnerability, CVE-2017-5638, patched back in March.

The Vice President of the Apache Struts PMC says the attackers likely used an unknown Struts zero day or an earlier announced vulnerability.

Victims of the massive Equifax breach may have to wait days to find out if they were impacted.

The Apache Software Foundation released a patch on Tuesday for a critical vulnerability impacting all versions of Struts since 2008.