HackingFinancial ServicesTechnologyFinanceStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

TransUnion Risk and Alternative Data Solutions

bd_0b341a77359973f9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 24, 2024

Filed

Oct 3, 2024

To disclose

10 weeks

Affected

570state residents only

Linked

4 filings

Confidence

65%

Full breach record for TransUnion Risk and Alternative Data Solutions →

TransUnion Risk and Alternative Data Solutions (TRADS) notified New Hampshire residents that individuals misrepresented themselves to gain unauthorized access to consumer data between June 1, 2023, and August 7, 2024. The incident involved 570 NH residents' personal information. TRADS terminated access, contacted authorities, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 419 days

discovery → filing · 10 weeks / 71 days

Jun 1, 2023

Begins

Jul 24, 2024

Discovered

Sep 10, 2024

Scope determined

Oct 3, 2024

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_3c441d0cd03008cf2024-10-02 · +1dCandidate
Vermont State AGbd_4146cd8f327217652024-10-02 · +1dVerified
Indiana State AGbd_cddc3733e7065fcb2024-10-02 · +1dVerified

Name: TransUnion Risk and Alternative Data Solutions
norm: transunion risk and alternative data

Name: TransUnion Risk and Alternative Data Solutions
norm: transunion risk and alternative data
Industry: Financial ServicesllmTechnologyllm

Discovered: Jul 24, 2024
Breach occurred: Jun 1, 2023 – Aug 7, 2024
Undetected for: 419 daysoccurrence → discovery
Materiality determined: Sep 10, 2024
Notification sent: Oct 2, 2024
Affected individuals: 570state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Terminated access to relevant accounts
Contacted the appropriate authorities
Notified the affected New Hampshire residents
Offered complimentary identity theft protection and credit monitoring services
Changes made: Enhanced security controls
Continually improve protection capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGOct 2 · first

Vermont State AGOct 2 · first

Indiana State AGOct 2 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/transunion-risk-alternative-data-solutions-20241003.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 3, 2024
Raw hash: e0082a06785baaea7a5aa66c4a75fcf60a0e99eecf20dafc3a84b2657ce362d3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTransUnion Risk and Alternative Data Solutions

Victim entityTransUnion Risk and Alternative Data Solutions

Incidentdiscovered Jul 24, 2024

Stated responseTerminated access to relevant accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov