A year after the Equifax breach, there are consequences—for consumers