TransUnion
bd_331561e568edbb3f · schema v1 · pii pii-v1
Full breach record for TransUnion →TransUnion LLC notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to its Salesforce application. A threat actor used social engineering (posing as a help desk technician) to trick call center agents into downloading a malicious application, gaining limited access on July 28-29, 2025. Consumer Social Security Numbers were exfiltrated. Approximately 16,508 New Hampshire residents were affected. TransUnion contained the breach, notified the FBI, and is offering 24 months of complimentary credit monitoring to affected individuals.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_83b605646965217dTexas State AGfiled 2025-09-04Candidate
- bd_d7d141dc595dd1b0South Carolina State AGfiled 2025-09-04Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/transunion-20250904.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 4, 2025
- Raw hash
- 9d54a8a25b27222296c34a11b8cd34c2cbaa89ddc4c48c4f4c0e55d328cce1fa
Reporting entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Victim entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Incident
- Discovered
- Jul 30, 2025
- Materiality determined
- —
- Notification sent
- Sep 8, 2025
- Affected individuals
- 16,508
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.