UnknownOtherGovernment IDCritical

TransUnion

bd_83b605646965217d · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 29, 2025

Filed

Sep 4, 2025

To disclose

5 weeks

Affected · nationwide

4,461,511377,357 in this filing

Linked

15 records

Confidence

95%

Full breach record for TransUnion →11 incidents on file

TransUnion LLC based in Chicago, Illinois, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-07-29 and reported on 2025-09-04. 377,357 Texas residents were affected. 4,461,511 individuals affected in total. Types of information involved: Social Security Number Information. Consumers were notified via U.S. Mail.

J jump to incidentP pin to compareR raw source

Texas clock✓ TX CRA notice due5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · ≤ 5 weeks / 37 days

Jul 28, 2025

Begins

Jul 29, 2025

Discovered

Sep 4, 2025

Filed

vs. sector median

1 wks faster

This filing is one of 15 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

New Hampshire State AGbd_331561e568edbb3f2025-09-04Verified by operator
South Carolina State AGbd_d7d141dc595dd1b02025-09-04Verified by operator
Massachusetts State AGbd_d87eb450bda408862025-09-04Verified by operator
Montana State AGbd_9bac2141a674997f2025-09-03 · +1dVerified by operator

Show 6 more filings ↓up to 8d gap

Oregon State AGbd_5b59f10c6f6c553f2025-09-02 · +2dVerified
Iowa State AGbd_fd85f6604075cd912025-09-02 · +2dVerified by operator
Vermont State AGbd_82d4818cdee39c862025-09-01 · +3dVerified by operator
Nebraska State AGbd_aaa181287c2471442025-09-08 · +4dVerified by operator
California State AGbd_217b0e65bf1e48972025-08-27 · +8dVerified by operator
Maine State AGbd_9d7ad1a3ef9bd9ae2025-08-27 · +8dVerified by operator

Showing first 10 of 14 linked disclosures.

Name: TransUnion
norm: transunion
Domain: transunion.com

Name: TransUnion
norm: transunion
Domain: transunion.com
Industry: Otherllm

Discovered: Jul 29, 2025
Breach occurred: Jul 28, 2025 – Jul 29, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4,461,511state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unknown

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: TX CRA notice due
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

California State AGAug 27 · first

Maine State AGAug 27 · first

New Hampshire State AG+8d

South Carolina State AG+8d

Massachusetts State AG+8d

Texas State AG+8d · this page

Nebraska State AG+12d

Pattern: first filing Aug 27 (CA), last Sep 8 (NE) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0004534
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 4, 2025
Raw hash: 34ad2ce9b73000e51738556327eddb5712533b4e504d4c7ddeb5d73b009596a2

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityTransUnion

Victim entityTransUnion

Incidentdiscovered Jul 29, 2025

ComplianceTX CRA notice due

Extraction provenanceno artifact recorded

Source provenanceoag.my.site.com