The Equifax breach was not caused by a missing VPN

In 2017, Equifax disclosed that attackers had reached data it stored on people in the United States and elsewhere. The US Federal Trade Commission later described the breach as affecting about 147 million people. The stolen fields included names, Social Security numbers, birth dates, addresses, and, for a smaller group, driver's licence and card numbers.

Source: FTC, Equifax Data Breach Settlement.

The failure was an unpatched system at Equifax. A VPN on a customer's laptop would not have kept that database offline.

Where a VPN does apply

After a breach, people still visit banks, credit agencies, and mail. On those visits, the network can see the IP address and the site name unless the connection is encrypted and the IP is changed. That is the job of a VPN. It does not freeze credit, replace a password, or remove a Social Security number from a stolen file.

Oak VPN is a paid WireGuard service. The logs policy is on the privacy page.