Former Equifax Inc. CEO Richard Smith spent much of last week testifying before Congress about the massive data breach that has affected some 145 million U.S. consumers. Many grilling Smith questioned the timeline following the discovery of the incursion and wondered how three Equifax executives were able to sell shares totaling close to $2 million just days later.

The answers inevitably came back to the company’s chief legal officer, John Kelley III, who along with being in charge of security within the company, is responsible for approving share sales by Equifax executives.