TIAA-CREF INDIVIDUAL & INSTITUTIONAL SERVICES, LLC
ent_019ed84758b76cc4e934c17d2a849ebf
Disclosures
2
State AG · 1 jurisdiction
Incidents
—
no linked incident in sample
Max affected reported
1
as filed · State AG MD
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- TIAA-CREF INDIVIDUAL & INSTITUTIONAL SERVICES, LLC
- Normalized
- tiaa cref individual institutional— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900X9A0WEUBJW5675
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- tiaa.org
Disclosure history (2)newest first
- 🦀Maryland State AGas victim2025-11-13
TIAA reported a cybersecurity incident involving one Maryland resident. An unauthorized individual accessed the resident's TIAA account between January 4 and January 6, 2025, using valid credentials obtained from an unknown external source. TIAA reset the credentials, placed additional authentication monitoring, and offered 24 months of complimentary credit monitoring.
- 🦀Maryland State AGas victim2025-03-12
TIAA notified Maryland AG of a single-incident breach on March 5, 2025. An unauthorized individual used credentials obtained from a third-party source to reset a resident's online TIAA account credentials and viewed their name, user ID, account number, and financial balance. TIAA deactivated credentials, placed alerts, and offered 24 months of credit monitoring.