Social EngineeringFinancial ServicesFinancePretextingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedTargetedMulti-Stage ChainPIILowResolved
TRANSAMERICA RETIREMENT SOLUTIONS, LLC
bd_a833a5357f640aed · schema v1 · pii pii-v1
Full breach record for TRANSAMERICA RETIREMENT SOLUTIONS, LLC →On May 7, 2025, an unknown external actor impersonated a Transamerica employee via its call center (pretexting) to gain unauthorized access to a third-party cloud-based client management application. 1,281 individuals were affected (8 Maine residents). Internal systems were not compromised. Transamerica terminated access, engaged a forensic firm, and offered 24 months of Equifax identity monitoring.
Maine clockDiscovered Jun 10, 2025 → Filed with AG Jun 20, 202510d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_c6b780ffd4727d20New Hampshire State AGfiled 2025-06-20Verified
- bd_4e9d2c99e5d31804Indiana State AGfiled 2025-06-26(6d gap)Verified
- bd_9e30a90f43eda568Vermont State AGfiled 2025-06-26(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/83c03f44-b738-4450-bc8b-bd291d87006e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 20, 2025
- Raw hash
- f4d34558048042a2fe813336bebdf57c96489063e25363f25edaf758067778a3
Reporting entity
- Name
- TRANSAMERICA RETIREMENT SOLUTIONS, LLCnorm: transamerica retirement
- Domain
- transamerica.com
- Industry
- Other Commercial
Victim entity
- Name
- TRANSAMERICA RETIREMENT SOLUTIONS, LLCnorm: transamerica retirement
- Domain
- transamerica.com
- Industry
- Other Commercial
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jun 10, 2025
- Materiality determined
- —
- Notification sent
- Jun 26, 2025
- Affected individuals
- 8
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1566 Phishing
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 10, 2025→ Filed with AG: Jun 20, 202510d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.