TransUnion

Maine AG data breach notice filed listing TransUnion as the entity. The form reports 51 persons affected total (19 Maine residents) from an 'Internal system breach.' Form fields are internally inconsistent: breach date listed as Sept 19 2022, discovery date as 08-20-2009, and consumer notification date as July 13 2009 — these dates pre-date the breach date and suggest data-entry errors in the submission. The submitter is identified as a 'Consumer' (Trustee), not a TransUnion representative, further reducing reliability. No data categories acquired were specified; no identity-theft-protection services offered.

TransUnion LLC notified Nebraska residents of a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support. The incident did not involve credit reports or core credit information. TransUnion provided 24 months of complimentary credit monitoring and fraud assistance via Cyberscout. No specific count of affected individuals was disclosed in this notification letter.

TransUnion LLC notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to its Salesforce application. A threat actor used social engineering (posing as a help desk technician) to trick call center agents into downloading a malicious application, gaining limited access on July 28-29, 2025. Consumer Social Security Numbers were exfiltrated. Approximately 16,508 New Hampshire residents were affected. TransUnion contained the breach, notified the FBI, and is offering 24 months of complimentary credit monitoring to affected individuals.

TransUnion LLC based in Chicago, Illinois, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-07-29 and reported on 2025-09-04. 377,357 Texas residents were affected. 4,461,511 individuals affected in total. Types of information involved: Social Security Number Information. Consumers were notified via U.S. Mail.

TransUnion LLC notified South Carolina consumers of a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support operations. No credit reports or core credit information were accessed. TransUnion is offering 24 months of credit monitoring and fraud assistance.

TransUnion LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-09-04. 95,336 Massachusetts residents were affected.

TransUnion LLC notified Montana and Rhode Island residents of a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support operations. The incident involved limited personal information (PII) but explicitly excluded credit reports. Approximately 17,155 Rhode Island residents were identified as impacted. TransUnion is offering 24 months of complimentary credit monitoring and fraud assistance via Cyberscout.

TransUnion LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2025-09-02. 4,461,511 individuals were affected.

TransUnion LLC reported a cyber incident in Iowa where a threat actor used social engineering to pose as a help desk technician, tricking call center agents into downloading a malicious application. This allowed the actor to access a third-party application serving U.S. consumer support operations on July 28-29, 2025. The incident resulted in the exfiltration of consumer Social Security Numbers affecting approximately 25,943 Iowa residents. TransUnion contained the breach, notified the FBI, and provided 24 months of credit monitoring to affected individuals.

TransUnion notified Vermont consumers of a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support operations. The incident involved limited PII but explicitly excluded credit reports. TransUnion is offering 24 months of credit monitoring and fraud assistance via Cyberscout. No specific count of affected individuals was provided in the notice.

TransUnion LLC reported a cybersecurity incident involving unauthorized access to a third-party application used for U.S. consumer support operations. The breach exposed limited personal information (PII) but explicitly excluded credit reports or core credit data. TransUnion engaged Cyberscout for investigation and remediation, offering 24 months of complimentary credit monitoring and fraud assistance to affected individuals. The incident was reported to the California Office of the Attorney General under SB 24 on July 28, 2025.

TransUnion LLC reported a cybersecurity incident involving unauthorized access to a third-party application used for U.S. consumer support operations. The breach occurred on July 28, 2025, and was discovered on July 30, 2025. Approximately 4.46 million individuals were affected, including 16,828 Maine residents. The incident involved limited personal information (names, addresses, etc.) but explicitly excluded credit reports and core credit information. TransUnion provided 24 months of complimentary credit monitoring and fraud assistance.

TransUnion LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-07-28 and was reported on 2025-08-26. 88,898 Indiana residents were affected. 4,461,511 individuals affected in total.

TransUnion LLC reported a data breach to the Wisconsin DATCP. The public was notified on 2025-08-26. The incident occurred on July 28, 2025. Data accessed: Social Security numbers and dates of birth. 4,461,511 individuals were affected. 69,256 Wisconsin residents were affected.

TransUnion, LLC disclosed a cyber incident involving unauthorized access to personal data stored on a third-party application used for U.S. consumer support operations. The incident did not involve credit reports or core credit information. TransUnion provided 24 months of complimentary credit monitoring and fraud assistance via Cyberscout. The notification was filed with the Delaware Attorney General.

TransUnion is a global credit reporting agency that provides credit information and analytics services to businesses and individual consumers. It collects and aggregates information on over a billion individual consumers in over thirty countries including "Big Three" credit-reporting agencies in the United States. The data they handle includes credit history, credit scoring, and personal information protection services.

TRANSUNION filed a data-breach notice with the Illinois Attorney General in October 2024 (case 24-10-008). The register records the breach as discovered on June 1, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

TransUnion LLC notified the NH Attorney General of three additional impacted individuals in New Hampshire. Unauthorized actors used personal information obtained from non-TransUnion sources to impersonate consumers and attempt to access TransUnion products. TransUnion's systems were not compromised. The suspicious activity was identified between June 13 and June 20, 2023. Affected individuals were offered complimentary identity theft protection and credit monitoring.

TransUnion LLC notified consumers in Vermont of a cybersecurity incident where unauthorized actors exploited a bypass in individual verification measures for direct-to-consumer products. Actors impersonated consumers using personal information from non-TransUnion sources to access the consumer portal. The incident affected individuals between December 1, 2022, and January 13, 2023. TransUnion stopped the bypass, conducted an investigation, and offered one year of complimentary credit monitoring.

TransUnion LLC reported a data breach affecting 67 individuals, including 1 Maine resident, occurring between December 1, 2022, and January 13, 2023. The breach involved the acquisition of Social Security Numbers. Notification was sent on March 10, 2023, offering one year of credit monitoring.

TransUnion LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-12-01 and was reported on 2023-03-10. 2 Indiana residents were affected. 67 individuals affected in total.

TransUnion LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-10. 5 Massachusetts residents were affected. The report records the breach type as electronic.

TransUnion LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-02-16 and was reported on 2022-11-07. 3 Indiana residents were affected. 224 individuals affected in total.

TransUnion LLC reported an "impersonation event" that occurred between January 16, 2022, and July 15, 2022. The breach, discovered on October 26, 2022, affected 3 Maine residents. The compromised information included names and Social Security numbers. The company offered one year of credit monitoring to those affected.