I’m thinking it must be a scam. I’ve never used Equafax services, but I did the check and it stated:
Based on the information provided, we believe that your personal information may have been impacted by this incident.
It “may” have been impacted. They would know definitively if it had been or not. Scam if you ask me.
If you have credit (good, bad, indifferent)...they have your info period.
So yes, your info could be stolen in the breach.