Equifax's stolen data hasn't surfaced

When the Equifax breach was first disclosed back in September 2017, a lot of people were waiting for all kinds of identity theft. So far, though, that hasn't happened.

The data has yet to show up anywhere on the so-called dark web where stolen data usually appears. That has added to suspicions that a nation-state, rather than individuals seeking profit, may have been behind the attack, per CNBC.

Our thought bubble, per Axios cybersecurity reporter Joe Uchill: This isn't the first time this theory has surfaced — in fact, many people assumed this was the case right away, with new converts over the past 2 years.

• In some ways, the best outcome for the victims is a nation-state espionage attack — it could mean there's no intention to go for identity theft and tangible harm to the consumer.

Go deeper: After Equifax's mega-breach, nothing changed