DisclosureLens
HackingFinancial ServicesTechnologyFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PIIIdentity (basic)LowContained

TransUnion

bd_aaa181287c247144 · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Sep 8, 2025

To disclose

—

Affected

Not disclosed

Linked

9 filings

Confidence

68%
Full breach record for TransUnion →13 incidents on file

TransUnion LLC notified Nebraska residents of a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support. The incident did not involve credit reports or core credit information. TransUnion provided 24 months of complimentary credit monitoring and fraud assistance via Cyberscout. No specific count of affected individuals was disclosed in this notification letter.

Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Sep 8, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 9 about the same incident.View merged incident
A leak claim by shinyhunters about this victim predates this filing by 72 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 13d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗
Indiana State AGAug 26 · first
Wisconsin State AGAug 26 · first
Delaware State AGAug 26 · first
California State AG+1d
Maine State AG+1d
Vermont State AG+6d
Iowa State AG+7d
Montana State AG+8d
Nebraska State AG+13d · this page

Pattern: first filing Aug 26 (IN), last Sep 8 (NE) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.