TransUnion
bd_fd85f6604075cd91 · schema v1 · pii pii-v1
Full breach record for TransUnion →13 incidents on fileTransUnion LLC reported a cyber incident in Iowa where a threat actor used social engineering to pose as a help desk technician, tricking call center agents into downloading a malicious application. This allowed the actor to access a third-party application serving U.S. consumer support operations on July 28-29, 2025. The incident resulted in the exfiltration of consumer Social Security Numbers affecting approximately 25,943 Iowa residents. TransUnion contained the breach, notified the FBI, and provided 24 months of credit monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 28, 2025
Begins
Jul 30, 2025
Discovered
Sep 2, 2025
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Montana State AGbd_9bac2141a674997f2025-09-03 · +1dVerified by operator
- Vermont State AGbd_82d4818cdee39c862025-09-01 · +1dVerified by operator
- Nebraska State AGbd_aaa181287c2471442025-09-08 · +6dVerified by operator
- California State AGbd_217b0e65bf1e48972025-08-27 · +6dVerified
Show 4 more filings ↓Show fewer ↑up to 7d gap
- Maine State AGbd_9d7ad1a3ef9bd9ae2025-08-27 · +6dVerified
- Indiana State AGbd_085cfd43425228862025-08-26 · +7dVerified
- Wisconsin State AGbd_b187955d41edb1322025-08-26 · +7dVerified
- Delaware State AGbd_b4d8a6f47a0b6abc2025-08-26 · +7dVerified by operator
Filing propagation · 9 filings · 9 states
View merged incident ↗Pattern: first filing Aug 26 (IN), last Sep 8 (NE) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.