HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
TransUnion
bd_b4d8a6f47a0b6abc · schema v1 · pii pii-v1
Full breach record for TransUnion →TransUnion, LLC disclosed a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support operations. The incident did not involve credit reports or core credit information. TransUnion provided 24 months of complimentary credit monitoring and fraud assistance via Cyberscout. The notification was filed with the Delaware Attorney General.
Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 3 about the same incident.View merged incident
A leak claim by shinyhunters about this victim predates this filing by 59 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_82d4818cdee39c86Vermont State AGfiled 2025-09-01(6d gap)Verified
- bd_fd85f6604075cd91Iowa State AGfiled 2025-09-02(7d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/01/Transunion_U.S.-Adult-Consumer-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 26, 2025
- Raw hash
- 0bdbd32fc6a7cd225f38d18e850752951892936e0a2a0d9ac8e50be03100d8d8
Reporting entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Victim entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Filed notification with Delaware Attorney General
- Third party
- via Cyberscout
- Initial access
- supply_chain
Compliance
- Compliance flags
- Leak >30d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.