Equifax (EFX) FY2025 Earnings Quality Report

Grade: F — Two Red Flags in a Debt-Heavy Credit Bureau

Framework: Schilit *Financial Shenanigans* + Beneish M-Score + forensic accounting principles

Data: SEC EDGAR 10-K (Filed 2026-02-19) + Yahoo Finance

Auditor: Ernst & Young LLP — Clean opinion

One-line verdict: Equifax delivered another year of clean growth — revenue +7% to $6.07B, operating margin 18.0%, operating cash flow +22% to $1.62B, and record free cash flow of $1.13B. The core credit-bureau engine is doing what it is supposed to do: turning every dollar of revenue into high-margin, recurring cash. But the balance sheet that the operating business rides on is uncomfortably thin. Cash sits at just $178M against $5.1B of total debt, and goodwill plus intangibles total $8.2B — 177% of shareholders' equity of $4.6B. This is a company with an excellent P&L balanced on a leveraged capital structure, and the screening engine flags that capital structure twice. There is no accounting manipulation signal here (M-Score of -2.84 is comfortably clean, operating cash flow is 2.45x net income) — just balance-sheet fragility that would matter in a credit-cycle downturn for the information company whose biggest customers are lenders.

The Numbers: Steady Recurring-Revenue Growth

Equifax is a pure-play data, analytics and technology company selling credit, employment and identity data primarily to U.S. lenders. The 10-K's Key Performance Indicators table sets out the core trend cleanly: revenue grew 7% to $6,074.5M, operating income grew 5% to $1,095.2M and net income attributable to Equifax grew to $660.3M. Operating cash flow jumped 22% to $1,615.7M while capital expenditures dropped 3% to $480.2M, producing $1,135.5M of free cash flow — a record.

The MD&A attributes USIS growth to "growth in mortgage and diversified markets revenue in Online Information Solutions, as well as growth in Financial Marketing Services." Workforce Solutions growth came from "Verification Services, partially offset by declines in Employer Services." International growth was "primarily driven by growth in Europe and Latin America."

The 10-K flags one quiet caveat inside SG&A: "the increase is primarily due to higher people costs which was primarily due to higher incentive plan costs, as well as higher litigation expense and an accrual for a settlement associated with the resolution of four related class action lawsuits." Four class action settlements is not nothing — that is still the long tail of the 2017 data breach working through the income statement eight years later.

Cash Flow: High Quality, Growing

Operating cash flow at 2.45x net income is excellent — because Equifax carries substantial depreciation and amortization (the MD&A notes "depreciation and amortization expense for 2025 increased $49.7 million" to $719.5M) and the underlying software subscriptions generate cash ahead of GAAP recognition. The trend is improvement across all four years.

Capital allocation shifted in 2025: the Board approved a new $3B buyback authorization in April 2025, and Equifax "repurchased 4,006,173 shares of our common stock on the open market for $927.4 million" — zero buyback in 2023 or 2024. Dividends rose 43% ($0.39 to $0.50 quarterly) and $232.8M was paid out. Combined return of capital: ~$1.16B against $1.13B of free cash flow.

That math explains the cash balance staying at $178M. Equifax is returning essentially all free cash flow to shareholders rather than deleveraging. The MD&A says "approximately $2.1 billion was available for future purchases of common stock" at year end.

The 18-Point Screening

Revenue Quality: Clean

No revenue-side manipulation signals. Cash conversion is actually accelerating faster than billings.

Expense Quality: Clean

The cloud migration continues to pay off — CapEx is declining in absolute terms even as revenue grows, which is the whole point of moving from owned data centers to cloud-hosted infrastructure. The 10-K calls this "the final stages of migrating the vast majority of our applications and systems infrastructure from legacy on-premises systems to cloud-based solutions."

Cash Flow Quality: Two Reds

C4 is a red flag. Equifax ended 2025 with $178M in cash against $5,085M of total debt. A 4% coverage ratio is extreme for a non-financial company. The flag isn't that Equifax cannot service this debt — its cash flow comfortably can — but that the company has no cushion. One bad year or one major regulatory/litigation event and the balance sheet becomes constrained.

Balance Sheet Health: One Red

D1 is a red flag. Goodwill of $6.75B plus other intangibles of $1.43B totals $8.18B against stockholders' equity of $4.60B — 177%. This goodwill is accumulated from years of bolt-on acquisitions (Boa Vista Servi os in 2023, Appriss Insights, and many smaller deals). Any future impairment charge on this goodwill would flow through to equity. EFX is not amortizing goodwill (it cannot under US GAAP) but the intangibles are being amortized at ~$400M+/year, which is why GAAP operating income is dragging behind cash operating performance.

Leverage itself (D2) is fine at 2.8x Debt/EBITDA. The concern is the *composition* of the balance sheet — heavy intangibles funded by heavy debt — rather than the ability to pay.

Acquisition Risk

No recent goodwill surge — 2025 was a relatively quiet year for M&A after the 2023 BVS acquisition.

Beneish M-Score: -2.84 (Clean)

The Beneish M-Score of -2.84 is well below the -2.22 fraud threshold. Nothing in the eight component variables signals manipulation.

Altman Z-Score: 2.57 (Grey Zone)

The Z-Score of 2.57 sits just below the 2.90 "safe" threshold — the grey zone runs from 1.23 to 2.90. The primary drivers dragging the Z-Score into grey territory are the low working capital ratio and the heavy goodwill-inflated asset base. Equifax is not close to distress, but its capital structure is less conservative than the business would suggest.

Key Risks from the 10-K

1. Another Cybersecurity Incident Would Be Catastrophic

The 10-K directly acknowledges the 2017 breach aftermath in Item 1A: "We have previously experienced a material cybersecurity incident and if we experience additional breaches of our security measures, including from incidents that we fail to detect for a period of time, sensitive data may be accessed, stolen, disclosed or lost." It is candid about the consequences: "our reputation with consumers and other stakeholders and our customer relationships were damaged following a prior material cybersecurity incident, resulting in a negative impact on our revenue for a period of time."

Equifax also flags an evolving threat landscape: "artificial intelligence can automate and hyper-personalize existing attack vectors like phishing and deepfakes." The company "cannot ensure that our insurance policies in the future will be adequate to cover losses from any security breaches." For a data custodian carrying 177% of equity in goodwill, a second breach could impair that goodwill.

2. Cloud Migration Execution Risk

The 10-K states: "We are in the final stages of migrating the vast majority of our applications and systems infrastructure from legacy on-premises systems to cloud-based solutions hosted by third parties… This complex, multifaceted and extensive initiative has been expensive and has caused, and may cause in the future, unanticipated problems and expenses." The declining CapEx trend shows the migration is winding down, but Item 1A flags specific residual risk: "We have made significant investments in our technology transformation, and if we were to change a primary cloud-based service provider, we may incur additional costs in connection with a transition."

3. Industry Certifications Can Be Revoked

The 10-K discloses a specific, under-appreciated risk: "as a result of a prior material cybersecurity incident, we lost certain key certifications which caused certain customers and business partners to stop or pause doing business with us and temporarily limited our ability to win new business. We had to spend significant resources on remediation activities in order to obtain these key re-certifications." Losing a certification can lock Equifax out of specific customer contracts — not hypothetical, it has already happened once.

4. Data Supplier Withdrawal

The Work Number (Equifax's crown jewel within Workforce Solutions) relies on voluntary employer contributions of payroll data. Item 1A warns: "For a variety of reasons… our data sources could withdraw, delay receipt of, or increase the cost of, the data they provide to us. We also compete with several of our third-party data suppliers and intellectual property providers. If a substantial number of data sources or certain key data sources withdraw or become unable to provide their data… our ability to provide products and services to our customers could be adversely affected."

5. Mortgage Market Sensitivity

The MD&A flags the 2026 outlook: "We expect U.S. mortgage credit activity in 2026 to be slightly below the levels of activity seen in 2025. The U.S. mortgage market, particularly the mortgage refinance portion of the U.S. mortgage market, can be significantly impacted by U.S. interest rates which impact mortgage rates available to consumers." Workforce Solutions has mortgage-linked verification revenue, USIS has online mortgage-credit revenue. A sustained high-rate environment remains a headwind.

6. Litigation Accrual Tail

The MD&A discloses that 2025 SG&A included "an accrual for a settlement associated with the resolution of four related class action lawsuits." The 10-K does not quantify this accrual in the section read, but four class action settlements in one year — this far after the original 2017 breach — signals the legal tail is not fully closed.

Summary

Equifax's FY2025 10-K shows an operationally strong credit bureau generating record cash flow — $1.62B of operating cash and $1.13B of free cash on $6.07B of revenue. The income statement is clean: no revenue-side manipulation signals, stable gross margin, healthy SG&A ratio, cash conversion over 2x net income. The Beneish M-Score of -2.84 says there is no manipulation story to tell.

The two red flags are both balance-sheet structural:

Things working: M-Score -2.84 clean, CFFO 2.45x net income, revenue growing, FCF record, SG&A/gross-profit healthy at 47%, Debt/EBITDA manageable at 2.8x, CapEx declining as cloud migration matures.

Things to watch: the $5B of debt needs to refinance at current rates; the mortgage market is the single biggest swing factor for 2026; and the 2017 breach tail is still producing class action settlements.

Bottom line: Equifax passes all accounting-quality screens and is financially solvent, but the balance sheet is running hot for a company whose reputation depends on trust. The F grade here reflects the mechanical scoring of two critical-category fails (C4, D1) rather than any suggestion of manipulation. Investors comfortable with 2.8x leverage and recurring cyber exposure will see high-quality cash flow; investors requiring a fortress balance sheet will not.

**Disclaimer**: This report is based on Equifax's FY2025 10-K (SEC EDGAR) and public financial data. It uses forensic accounting screening frameworks (Schilit's *Financial Shenanigans*, Beneish M-Score, Altman Z-Score) for red flag detection. This is NOT investment advice. Screening for red flags does not constitute a buy or sell recommendation. Past financial performance does not predict future results. Always do your own research and consult a qualified financial advisor.

**About EarningsGrade**: We screen earnings reports to help investors identify financial red flags. Our approach: "Screen out, not screen in." A passing grade means no red flags were detected — it does not mean the stock is a good investment.