How Equifax "bungled" its response to massive data breach