MONTPELIER, Vt. (AP) — Vermont officials say they may pursue legal action against Equifax after more than 240,000 residents had their personal information exposed in a nationwide data breach.

The Times Argus reports ( ) state law mandates companies report data breaches to state officials within 10 days and to the public within 45 days.

The credit reporting company discovered the hack July 29, but waited until Sept. 7 to warn the public.

Information that was exposed includes Social Security numbers, birthdates and addresses. Driver's licenses and credit card information also could have been disclosed.

Christopher Curtis, of the attorney general's office, says the state is exploring legal action against Equifax

A number of states have already filed suit.

The company is allowing customers to freeze credit reports for free for 30 days.