HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICLowContained
TransUnion
bd_d7d141dc595dd1b0 · schema v1 · pii pii-v1
Full breach record for TransUnion →TransUnion LLC notified South Carolina consumers of a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support operations. No credit reports or core credit information were accessed. TransUnion is offering 24 months of credit monitoring and fraud assistance.
Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 3 about the same incident.View merged incident
A leak claim by shinyhunters about this victim predates this filing by 68 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_331561e568edbb3fNew Hampshire State AGfiled 2025-09-04Verified
- bd_83b605646965217dTexas State AGfiled 2025-09-04Candidate
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/Consumer%20Letter%20-%20TransUnion.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 4, 2025
- Raw hash
- 947b7d514dbe6eea552903a9b65dc972109273d920fea7a22a5b6bb593c917f2
Reporting entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Victim entity
- Name
- TransUnionnorm: transunion
- Domain
- transunion.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Aug 1, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Filed Security Breach Notice with South Carolina Office of the Consumer Advocate
- Third party
- via Third-party application serving U.S. consumer support operations
- Initial access
- supply_chain
Compliance
- Compliance flags
- Leak >30d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.