Equifax sits inside the structurally protected US credit-bureau triopoly and owns The Work Number, a genuine wide-moat asset, but a 35x P/E, sub-cost-of-capital 8.85% ROIC, and a still-levered balance sheet leave little margin for a mortgage cycle that fails to reaccelerate.

Plain English

Equifax is one of three companies the US relies on to keep credit records. When you apply for a mortgage, car loan, or apartment, a lender checks Equifax's file on you. Equifax also owns The Work Number, a giant database of payroll records that lenders pay to query to verify your job and income. Both businesses are protected because no one else has the data and no new company can easily build it. The risks are hackers, regulators capping prices, and new tools that look at your bank account instead of your credit file. The stock is good but pricey today.

Thesis

Equifax is one leg of the US credit-bureau oligopoly (with TransUnion and Experian) and the owner of Workforce Solutions, whose Work Number employer-payroll database is a near-irreplaceable verification utility used by mortgage, auto, and government agencies. That payroll-records moat plus contractual access to lender data give EFX something close to a regulated tollbooth on US credit decisions. The problem is the price and the math. The scorecard prints a 10-year average ROIC of 8.85% and a 5-year ROIIC of just 7.15%, both of which are either at or below a reasonable cost of capital — this is not a 20%-ROIC compounder hiding inside an oligopoly, it is a leveraged data company whose cloud transformation has yet to translate incremental capital into incremental excess returns. Net debt/EBITDA at 2.94x is manageable but not Buffett-grade, and 5y FCF conversion of 0.0% reflects ongoing cloud capex plus working capital from the 2017 breach hangover and acquisition integration. At $173.85 versus IV base of $159.49 and IV high of $239.81, Px/IV = 1.09 — you are paying full base-case IV for a business priced at 35.5x TTM (vs. 10y average 40.97x), with a reverse-DCF embedded growth of 9.11%. That is feasible if mortgage volumes normalize and Workforce Solutions keeps compounding 15%+, but it is not margin of safety. Buy below $130; trim above $230.

Moat

Equifax is one of three companies (with Experian and TransUnion) that maintain near-comprehensive credit files on US consumers. This is the textbook intangibles-plus-scale-economics moat that Buffett describes when he talks about businesses where the low-cost producer in a commodity-economic product wins by widening the price advantage to the customer [6]. Credit-file data is, in effect, a commodity input to lender underwriting; the bureau that has the most complete file at the lowest unit cost wins. EFX has run that playbook for fifty years, and the regulatory and contractual cost of standing up a fourth bureau today is effectively prohibitive. Pricing power: Bureaus can pass through price increases to lenders during high-volume cycles because lenders have no substitute — every mortgage origination requires a tri-merge credit pull. FICO has aggressively raised score royalty pricing into the bureau channel, demonstrating the pricing umbrella in this stack. EFX captures part of that umbrella but is also a price-taker to FICO. Verdict on pricing power: meaningful but bounded by FICO upstream and by regulator/CFPB scrutiny downstream. Switching costs: Once a lender's loan-origination system is wired to a bureau API, switching is a multi-quarter integration with model-revalidation cost. This is not Bloomberg-level lock-in, but it is real friction and it explains why the triopoly has been stable for decades. Network effects: The strongest moat lives in Workforce Solutions / The Work Number. Employers contribute payroll records into a database that becomes more valuable to verifiers (mortgage lenders, government benefit agencies) as more employers contribute, which then attracts more verifiers, which then makes contribution more attractive to employers because it offloads their verification-of-employment burden. This is a real two-sided network effect inside an under-appreciated corner of the company. Today Workforce Solutions is roughly half of EFX revenue and the highest-margin segment. Intangibles: Branded scores (FICO is the dominant brand, but Equifax co-owns VantageScore with Experian and TransUnion). Regulatory licenses to operate as a Consumer Reporting Agency under FCRA also function as an intangible barrier — only the established three have the compliance infrastructure, breach-tested controls, and political relationships to operate at scale. Cost advantages: At marginal cost, looking up a credit file or a payroll record is essentially zero. The fixed cost is the database itself. EFX, like Buffett's GEICO, benefits from scale economies in a product with commodity-like characteristics — being the low-cost producer is what Buffett called 'all-important' [6]. The cloud migration, if it lands, should drive marginal cost down further. Competitor stress test ($10B + 5 years): A new entrant with $10B and five years could not legally or operationally replicate the credit-file or payroll-records database. Even Amazon would face FCRA compliance, employer-contract incumbency, and lender-integration moats it could not buy through. The realistic threat is not de-novo entry; it is regulatory reshaping (CFPB rulemaking, medical-debt removal, restrictions on data use) or a parallel-rail solution like open-banking cash-flow underwriting that routes around the bureau. Erosion risks: (1) CFPB and state AGs can compress pricing power; (2) cash-flow underwriting from Plaid/MX/Bank pipes is a real long-cycle threat to credit-file primacy; (3) The Work Number's pricing has drawn class-action and CFPB scrutiny — if 'consumer pays for own data' rules tighten, the high-margin verifier fees compress. Despite that, the moat is durable across the next decade. Moat verdict: WIDE.

Management

CEO Mark Begor (since 2018) was hired to clean up the 2017 breach mess and execute the multi-year cloud-native rebuild ('EFX Cloud'). On execution he has delivered: the company has migrated the bulk of its data assets to a single cloud platform, integrated Workforce Solutions acquisitions (Appriss Insights, Health e(fx), TALX legacy plus bolt-ons), and grown The Work Number records to north of 700 million active records. That is real operational achievement. The capital-allocation scorecard is mixed. Reinvestment: Capex has been very heavy through the cloud transformation, and the 5-year ROIIC of 7.15% suggests the incremental dollars have not yet earned a clear excess return — this is the single most important number in the file. Management's bull case is that capex now declines, the cloud platform produces operating leverage, and ROIIC reverts upward as the denominator shrinks and the numerator expands. That is plausible but not yet evidenced in the FCF conversion line, which prints 0.0% on a 5-year basis (a flag the scorer notes deserves attention; maintenance capex is uncertain with a >50% spread). Acquisitions: EFX has been a serial acquirer of payroll-data and identity assets. Appriss Insights ($1.8B, 2021) was paid for at top-of-cycle valuation just as rates began rising; the strategic logic is sound, the price was rich. Boa Vista in Brazil added geographic optionality but at the cost of EM exposure. The pattern is 'tuck in to widen Workforce moat,' which is correct strategy, but the prices paid did not leave obvious value on the table. Debt: Net debt/EBITDA of 2.94x is in the manageable-but-not-conservative range. Management has been deleveraging post-Appriss; coverage is adequate but the interest_coverage field is null in the scorecard, which is itself a yellow flag. Buybacks: Share count change over 10 years is +0.34% — essentially flat. EFX has not been a buyback machine; the float has been preserved primarily through SBC offset rather than aggressive shrinkage. They have not been buying meaningfully below IV, and they have not been issuing meaningfully above it either. This is C-grade buyback discipline: not destructive, not value-creating. Dividends: A modest, growing dividend, well-covered. Communication: Disclosure quality post-breach is materially better than pre-2017. The company segments Workforce Solutions, US Information Solutions, and International cleanly. Management does not over-promise on cloud savings; guidance has generally been credible. The 2017 breach itself remains the largest black mark on the management franchise (predates Begor) and the cultural memory should not be ignored — this was a governance failure of the first order. Overall: The current team has executed an operational turnaround with real moat-widening (Workforce Solutions), but capital deployed has not yet earned excess returns, M&A has been priced full, and buyback discipline is unremarkable. Capital allocator: B-.

Industry

Porter's Five Forces on the US consumer credit-bureau industry. Threat of new entrants: VERY LOW. The combination of FCRA compliance, lender-channel incumbency, data-furnisher contracts, and the political risk of mishandling consumer data make de-novo entry essentially impossible. Even Amazon-scale capital cannot buy a national credit file. Threat of substitutes: MEDIUM AND RISING. Cash-flow underwriting using bank-transaction data (Plaid, MX, Finicity/Mastercard) is a credible parallel rail that bypasses the traditional credit file for thin-file borrowers and increasingly for prime borrowers as well. Buy-now-pay-later providers are operating partly outside the bureau system. Open-banking regulation (CFPB 1033) accelerates this. Over a 10-year horizon this is the single biggest force pressing on bureau economics. Bargaining power of buyers: MEDIUM-HIGH. Buyers are concentrated — the largest mortgage originators, banks, and the GSEs negotiate bureau pricing centrally. The recent FICO score-fee escalation has caused vocal lender pushback, which spills onto the bureaus too. The Mortgage Bankers Association has lobbied hard against bureau cost increases. Bargaining power of suppliers: MIXED. Data furnishers (banks, card issuers, lenders) are also customers — they supply tradeline data and consume credit pulls, which creates structural alignment but also gives them leverage. FICO is the dominant supplier of the score itself and has shown it can take pricing from EFX's stack. Employers who furnish payroll records to The Work Number are increasingly aware of the value they are providing for free, and the regulatory winds favor employee data ownership. Competitive rivalry: LOW within the triopoly, MEDIUM against adjacent players. EXPN, TRU, and EFX rarely compete on price for established lender contracts; they compete on product (analytics, fraud, identity, employment data). Workforce Solutions is the area where EFX has a unique lead because TRU and EXPN do not own the equivalent of The Work Number — that is a rare structural advantage inside a triopoly. Value pool location: The traditional credit-file commodity is a slow-growth, regulated utility. The high-margin growth pool is in (1) employment/income verification, (2) identity and fraud, (3) analytics and decisioning. EFX is correctly aligned to the growth pool via Workforce Solutions. Trajectory: The pool is migrating away from raw credit pulls and toward verified, real-time data services — favorable to whoever owns the underlying datasets. The mortgage cycle is the cyclical overlay; mortgage originations remain depressed versus 2020-2021, and a normalized cycle is roughly 30-40% upside to the relevant volumes. Industry Verdict: Good. (Triopoly structure is excellent; substitute risk and political/regulatory risk pull it back from 'Excellent.')

Inversion

Bear case. I am short EFX from $173.85 with a 24-month horizon and a target of $105.

1. The single event that kills this: A serious data-security incident — either at EFX itself (a 2017 repeat) or at a peer that triggers a regulatory cascade, with the CFPB and state AGs imposing structural remedies including consent-based data use, mandatory consumer pricing transparency on Work Number records, and a hard cap on verification-of-employment fees. The 2017 breach cost EFX roughly $1.4B in direct settlements and years of margin compression; a sequel under a more activist enforcement environment would be materially worse and the political support for harder action is now baked in. The probability is not high in any given year, but over a 5-year horizon it is non-trivial, and the asymmetry is brutal: the upside if it doesn't happen is already in the price, the downside if it does is 50%+.

2. Why the moat is narrower than bulls think: The wide-moat narrative leans on the credit-bureau triopoly, but the actual cash-flow generator is increasingly Workforce Solutions, which is a different and less-protected business. Employer-payroll data is not protected by FCRA the way credit-file data is; it is protected by employer contracts, employer inertia, and a few payroll-processor partnerships that can be re-cut. ADP, Paychex, Workday, and Gusto each sit on payroll data they could monetize directly through their own verification offerings — and several already do. UKG and Workday-led verification consortia are actual, not theoretical, threats. If even 20% of contributing employers route through an alternative verifier in five years, Work Number unit economics inflect badly because the network effect operates in reverse. On the credit-file side, open-banking-driven cash-flow underwriting (Plaid, MX, Mastercard's Finicity, and bank-direct rails) is steadily eating thin-file underwriting and is poised to move into prime as CFPB 1033 implementation matures. The moat is wide today and structurally narrowing tomorrow; bulls are paying as if the wideness compounds.

3. Why management is worse than it appears: Begor has executed operationally, but the capital-allocation record under his tenure is uninspiring. ROIIC of 7.15% is the smoking gun — over five years, every incremental dollar of capital has earned roughly the cost of capital, not in excess of it. That includes the Appriss acquisition at $1.8B near peak valuations and a sustained heavy-capex cloud rebuild that has yet to deliver the FCF that was promised (5y FCF conversion: 0.0%). Buybacks have been minimal (share count up 0.34% in 10 years, meaning float is preserved largely as SBC offset rather than meaningful shrinkage). Net debt/EBITDA of 2.94x means the company entered a higher-rate environment with less flexibility than peers. The interest_coverage field is null in the scorecard, which itself is a yellow flag for a levered cyclical. None of this is disqualifying, but it is not the profile of a great capital allocator.

4. What bulls are extrapolating that won't hold: Bulls extrapolate (a) Workforce Solutions growth at 15-20% indefinitely, (b) cloud-platform operating leverage that takes margins to mid-30s, (c) a mortgage-cycle re-acceleration that returns Information Solutions to growth, (d) ROIIC reverting up as capex normalizes. Each is plausible. None are guaranteed. The reverse-DCF embedded growth of 9.11% requires the company to compound owner earnings at near-double-digit rates for many years; if Workforce Solutions normalizes to 10% growth and the cycle disappoints, the multiple compresses against a lower numerator and the math gets ugly fast. The 10y average P/E of 40.97 was set during ZIRP and a unique mortgage cycle; reverting toward 25x is plausible.

5. Valuation trap (multiple compression / regime change): At $173.85, 35.5x TTM, with 8.85% ROIC and 7.15% ROIIC, this is priced as a quality compounder while the underlying returns are merely adequate. If multiples revert to the 20-25x range that an 8-9% ROIC business with a 9% reverse-DCF growth requirement deserves, and if owner earnings of $0.74B grow at a more honest 6-7% (mortgage cycle disappoints, Work Number competition emerges, ROIIC stays stuck), fair value is $90-105 — bracketing the scorer's IV_low of $90.07. Bulls anchor on the IV_base of $159.49 and IV_high of $239.81; bears anchor on IV_low. The asymmetry favors patience.

If I am right, the stock could be worth $105 within 24 months.

Lollapalooza Bias Check

Biases active in me right now as the analyst:

Authority bias. Equifax is one of three companies the federal government has implicitly licensed as systemically important consumer-data infrastructure. I am inclined to defer to that authority and assume durability that is partly a story I'm telling myself. Antidote: re-read the 2017 breach record and the medical-debt-removal episode and remember that regulators can re-shape the franchise in ways shareholders feel.

Social proof. Every quality-investing newsletter I respect owns or has owned EFX or its peers. Sequoia, Akre, and similar shops have written admiring pieces about Workforce Solutions. The fact that smart people own it makes me want to find reasons to own it. Antidote: write the inversion before the bull case, and require that the bear case be defeated on its own terms — which I have only partly done above.

Anchoring. The IV_base of $159.49 anchors my fair-value sense; I notice myself mentally rounding 'fair' toward $160 even though IV_low is $90 and the bear case targets $105. The scorer's IV_base is a midpoint, not a target. Antidote: position-sizing should be governed by IV_low, not IV_base, especially when the scorer's own notes flag maintenance capex uncertainty and missing P/FCF history.

Recency. The 2017 breach is now 9 years old and Begor's turnaround has been the recent narrative. Recency makes me discount the breach risk and over-weight the cloud-rebuild story. Antidote: the breach risk is a stochastic tail event whose probability does not decline simply because time has passed.

Confirmation. I came in with a prior that 'oligopoly + network-effect dataset = high quality.' I caught myself looking for reasons to confirm rather than test that prior. The ROIIC of 7.15% is the data point that disconfirms it, and I had to discipline myself to weight it heavily.

Deprival super-reaction (omission). I am aware that if I rate this 'Hold' and the stock runs to $230 on a mortgage cycle reaccel, I will feel the pain of missed gains. That is a real bias toward being too constructive on the recommendation. The honest answer is that I do not have a margin of safety at $173 and the position guidance must reflect that even if it costs me upside.

Incentive bias is muted in this exercise but worth naming: analysts are rewarded for differentiated calls, which biases toward stronger recommendations than the data supports.

10-Year Outlook

Ten-year outlook. Will EFX still be in the credit-bureau triopoly in 2036? Almost certainly yes — the regulatory and contractual moats around the credit file are too thick to dissolve in a decade. Will the customer base be larger? Yes on a unit basis: more consumers, more lender pulls, more verifications, more international markets. Will profit per customer be higher? This is where the conviction wobbles. Workforce Solutions per-record monetization should rise if employer contribution holds and pricing pressure is contained. Information Solutions per-pull pricing is more contested as cash-flow underwriting absorbs a slice of the volume and CFPB scrutiny caps headline price moves. Will the moat be wider? The credit-file moat will be roughly equally wide — not narrower in any structural way, but not wider either. The Workforce Solutions moat will be wider if EFX continues winning employer contracts faster than ADP/Workday/Gusto-led alternatives can scale; narrower if those alternatives consortium-up. Single biggest threat: open-banking-driven cash-flow underwriting bypassing the traditional bureau pull, plus a parallel verification-of-employment standard that doesn't run through The Work Number. Both are real, both are slow-moving, both are credible 10-year threats rather than 2-year ones. Cyclical overlay: at least one full mortgage cycle (peak-trough-peak) plays out in this window; whether EFX exits 2036 with a higher cyclically-adjusted ROIC than today's 8.85% is the key question, and it depends primarily on whether cloud capex normalizes and ROIIC inflects upward toward the mid-teens. Capital allocation under a still-uncertain successor to Begor is another swing factor. Net read: same fundamental business, similar-or-slightly-wider moat, larger customer base, modestly higher profit per customer, with one identified credible threat that is not yet pricing in. CONFIDENCE: medium.

Position Guidance

• Recommendation: Hold
• Conviction: medium
• Target buy price: $130 (meaningful margin of safety vs. IV_base of $159.49 and roughly midway between IV_low $90.07 and IV_base $159.49)
• Target trim price: $230 (approaches IV_high of $239.81; bull case largely realized)
• Position sizing: If owned at cost, hold and let it work; do not add at $173.85 (Px/IV 1.09). New starter positions at 0.5-1.0% only below $145; full 2-3% sleeve only below $130. Do not exceed 3% given 2.94x net debt/EBITDA, 7.15% ROIIC, and unresolved FCF-conversion question.