Equifax discovered the vulnerability in July, but choose to reveal it publicly more than a month later.
During this time three senior executives sold about $1.8 million in stock.
The company was also widely criticized for its customer service approach in the aftermath of the hack, with users not know what data was hacked.
Data revealed included Social Security numbers, addresses, driver’s license data, and birth dates. Some credit card information was also put at risk.