HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)FinancialLowContained

TransUnion

bd_2bc0e049aa0901d3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 13, 2023

Filed

Sep 1, 2023

To disclose

11 weeks

Affected

3state residents only

Confidence

67%

Full breach record for TransUnion →13 incidents on file

TransUnion LLC notified the NH Attorney General of three additional impacted individuals in New Hampshire. Unauthorized actors used personal information obtained from non-TransUnion sources to impersonate consumers and attempt to access TransUnion products. TransUnion's systems were not compromised. The suspicious activity was identified between June 13 and June 20, 2023. Affected individuals were offered complimentary identity theft protection and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 80 days

Jun 13, 2023

Discovered

Sep 1, 2023

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: TransUnion
norm: transunion
Domain: transunion.com

Name: TransUnion
norm: transunion
Domain: transunion.com
Industry: Financial Servicesllm

Discovered: Jun 13, 2023
Materiality determined: —
Notification sent: Aug 28, 2023
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)Financial
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Conducted an in-depth investigation into the matter
Taken steps to prevent further improper transactions
Offering complimentary identity theft protection and credit monitoring services
Changes made: Continue to enhance security controls
Engage in robust, proactive security measures such as cyber-intelligence investigations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/transunion-20230901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2023
Raw hash: 083f112b6ba31b660cc580d9326ea914522ce89586d9c1c86c04cdabd69217af

Reporting entityTransUnion

Victim entityTransUnion

Incidentdiscovered Jun 13, 2023

Stated responseConducted an in-depth investigation into the matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov