HackingFinancial ServicesFinanceStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDHighContained

TRANSAMERICA RETIREMENT SOLUTIONS, LLC

bd_a833a5357f640aed · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 10, 2025

Filed

Jun 20, 2025

To disclose

10 days

Affected · nationwide

1,2818 in this filing

Linked

6 filings

Confidence

65%

Full breach record for TRANSAMERICA RETIREMENT SOLUTIONS, LLC →10 incidents on file

Transamerica Retirement Solutions, LLC reported a data breach occurring on May 7, 2025, where an unknown actor gained unauthorized access to a third-party cloud application by impersonating an employee. The incident affected 1,281 individuals, including 8 Maine residents. The breach was discovered on June 10, 2025, and notifications were sent on June 26, 2025. Affected data included personal identifiers and government IDs. Transamerica terminated access, engaged forensic investigators, and provided two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 10, 2025 → Filed with AG Jun 20, 202510d ✓ ME AG ≤30d10 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 34 days

discovery → filing · 10 days

May 7, 2025

Begins

Jun 10, 2025

Discovered

Jun 20, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_b9a37e99596fa1962025-06-20Verified
New Hampshire State AGbd_c6b780ffd4727d202025-06-20Verified
Indiana State AGbd_4e9d2c99e5d318042025-06-26 · +6dVerified
Vermont State AGbd_9e30a90f43eda5682025-06-26 · +6dVerified

Show 1 more filing ↓up to 6d gap

Nebraska State AGbd_e1e01965333cdf5a2025-06-26 · +6dVerified

Name: TRANSAMERICA RETIREMENT SOLUTIONS, LLC
norm: transamerica retirement
Domain: transamerica.com

Name: TRANSAMERICA RETIREMENT SOLUTIONS, LLC
norm: transamerica retirement
Domain: transamerica.com
Industry: Financial Servicesllm

Discovered: Jun 10, 2025
Breach occurred: May 7, 2025
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 26, 2025
Affected individuals: 1,281state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Filed notification with the Maine Attorney General
Initial access: valid_credentials

During the incident: Terminated access to the application
Launched an investigation with the assistance of a forensic firm
Completed a review of the records to confirm the identities of individuals potentially affected
Provided two years of identity monitoring service at our expense
Changes made: Terminated access to the compromised application
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: ME AG ≤30d · 10d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 10, 2025
→ Filed with AG: Jun 20, 2025
10d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 10, 2025 → Filed with AG: Jun 20, 2025	10d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGJun 20 · first

New Hampshire State AGJun 20 · first

Maine State AGJun 20 · first · this page

Indiana State AG+6d

Vermont State AG+6d

Nebraska State AG+6d

Pattern: first filing Jun 20 (MA), last Jun 26 (NE) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/83c03f44-b738-4450-bc8b-bd291d87006e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 20, 2025
Raw hash: f4d34558048042a2fe813336bebdf57c96489063e25363f25edaf758067778a3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTRANSAMERICA RETIREMENT SOLUTIONS, LLC

Victim entityTRANSAMERICA RETIREMENT SOLUTIONS, LLC

Incidentdiscovered Jun 10, 2025

Stated responseTerminated access to the application

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov