[ChemicalWarfare]

Well, yea there are scenarios where encryption alone doesn't help, but again it's one of the cornerstones of data safety. Other security measures like restricting data access to a limited set of source ips, masking of the data returned to the browser etc are typically put in place when dealing with sensitive info in addition to encryption of data at rest.

Also, that's not what happened at Equifax, at least based on the "struts vulnerability" narrative that Equifax has been pushing.

[wglb]

Not responsive to the question how in the world encryption does anything to prevent this?