A 2017 cybersecurity breach at credit bureau Equifax that affected close to 150 million Americans was “entirely preventable,” according to a report on Monday from the House Oversight Committee.

The Atlanta-based company “failed to implement an adequate security program to protect this sensitive data,” the panel wrote.