The FTC used Equifax as an example. The credit reporting agency suffered a massive data breach in 2017 after it failed to patch an Apache Struts vulnerability that had been exploited in the wild.
The incident impacted over 140 million people and the FTC and other government agencies at the time filed complaints that resulted in Equifax paying hundreds of millions of dollars as part of a settlement.