HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
TransUnion
bd_8600c700afac9a54 · schema v1 · pii pii-v1
Full breach record for TransUnion →TransUnion LLC reported a data breach occurring between January 1, 2021, and March 28, 2022, discovered on July 25, 2022. The incident involved an impersonation attempt resulting in unauthorized access to consumer reporting agency records. Data acquired included names combined with driver's license numbers. The breach affected 10,814 individuals, including 24 Maine residents. TransUnion provided written notification on August 4, 2022, and offered one year of credit monitoring services.
Maine clockDiscovered Jul 25, 2022 → Filed with AG Aug 4, 202210d ✓ ME AG ≤30d10 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_5ff096c83f24f861California State AGfiled 2022-08-04Candidate
- bd_6778f937b838f930Montana State AGfiled 2022-08-04Verified
- bd_7d4333b71dc4758aMontana State AGfiled 2022-08-04Verified
- bd_8eae63057a496eaaMontana State AGfiled 2022-08-04Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_1ca0244698b0451eMontana State AGfiled 2022-08-05(1d gap)Verified by operator
- bd_82a944d4ca5bf8b9Montana State AGfiled 2022-08-05(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b50e3c9a-20a7-4e9a-af95-9df4a325d659.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2022
- Raw hash
- 1ab8461071259dac9b6fac3c98156c4f82c8419691ee23915c98a0e4ac8fc08d
Reporting entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Victim entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Incident
- Discovered
- Jul 25, 2022
- Materiality determined
- —
- Notification sent
- Aug 4, 2022
- Affected individuals
- 10,814
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 25, 2022→ Filed with AG: Aug 4, 202210d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.