The GAO released its Equifax report on the one-year anniversary of the breach, highlighting the lack of any enforcement action yet by the two agencies responsible for oversight of credit reporting agencies, the CFPB and FTC.