The move comes after the credit-reporting bureau suffers another security black eye.