Statement from Apache on the Equifax security breach. It is suspected that a zero day exploit was used to get at the data.
https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax
Apache Struts is an open source project. See
https://struts.apache.org/ Many companies, including financial companies use open source.