AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumResolved
TRANSAMERICA RETIREMENT SOLUTIONS, LLC
bd_6883d3537d3cd53d · schema v1 · pii pii-v1
Full breach record for TRANSAMERICA RETIREMENT SOLUTIONS, LLC →Transamerica Retirement Solutions, LLC notified California regulators of a data breach occurring June 4-14, 2021. A misconfiguration on a plan administration website allowed unauthorized employers to access retirement contribution data, including names, SSNs, DOBs, and financial details. No evidence of misuse was found. The company provided two years of identity monitoring to affected individuals.
California clockDiscovered Jun 14, 2021 → Notified Aug 1, 202148d ✓ CA 60-day OK7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_258d5a7020744db7Maine State AGfiled 2021-08-04Candidate
- bd_d7f7594b68d7ecdbMontana State AGfiled 2021-08-04Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-543531
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2021
- Raw hash
- 0d0b0a12b09af9c9240c3d80ff85c728cf1321883aef6b16c1aa0fdf92582039
Reporting entity
- Name
- TRANSAMERICA RETIREMENT SOLUTIONS, LLCnorm: transamerica retirement
- Domain
- transamerica.com
Victim entity
- Name
- TRANSAMERICA RETIREMENT SOLUTIONS, LLCnorm: transamerica retirement
- Domain
- transamerica.com
Incident
- Discovered
- Jun 14, 2021
- Materiality determined
- —
- Notification sent
- Aug 1, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Regulator citations
- Filed Data Security Breach Notification with California Office of the Attorney General
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 14, 2021→ Notified: Aug 1, 202148d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.