Equifax Inc. must improve how it manages cybersecurity risk, regulators from eight states said Wednesday, responding to a 2017 data breach that exposed the personal data of nearly 148 million consumers.