How investors can punish Equifax for failing the public