DisclosureLens
UnknownFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDMediumContained

TIAA and TIAA Life

bd_014610c6a4a1a88c · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 8, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

13state residents only

Confidence

68%
Full breach record for TIAA and TIAA Life →10 incidents on file

TIAA notified Massachusetts residents of a security event discovered on September 8, 2026, involving the unauthorized acquisition of personal information, including names and Social Security numbers. The company is offering 24 months of Experian IdentityWorks and identity restoration services. The specific attack vector and number of affected individuals were not disclosed in the notice.

Incident timeline — partial

? — ?

Breach window not drawn

Sep 1, 2026

Filed

No interval is drawn: the discovery date on record falls after this filing's date.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.