HackingStolen CredentialsTargetedPIIIDENTITY_BASICLowContained
TRANSAMERICA RETIREMENT SOLUTIONS, LLC
bd_9e30a90f43eda568 · schema v1 · pii pii-v1
Full breach record for TRANSAMERICA RETIREMENT SOLUTIONS, LLC →Transamerica Retirement Solutions notified Vermont consumers of a data breach on May 7, 2025. An unknown actor gained unauthorized access to a third-party cloud application by impersonating an employee via the call center. No internal network was compromised. The company engaged forensic investigators and is offering two years of identity monitoring.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4e9d2c99e5d31804Indiana State AGfiled 2025-06-26Verified
- bd_a833a5357f640aedMaine State AGfiled 2025-06-20(6d gap)Candidate
- bd_c6b780ffd4727d20New Hampshire State AGfiled 2025-06-20(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-26-transamerica-retirement-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2025
- Raw hash
- 1a2cc3d70ee77deb39c43f564cbdd9130ea0d520af9dd81442af63f15b673f94
Reporting entity
- Name
- TRANSAMERICA RETIREMENT SOLUTIONS, LLCnorm: transamerica retirement
- Domain
- transamerica.com
Victim entity
- Name
- TRANSAMERICA RETIREMENT SOLUTIONS, LLCnorm: transamerica retirement
- Domain
- transamerica.com
Incident
- Discovered
- May 7, 2025
- Materiality determined
- —
- Notification sent
- Jun 26, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.