TransUnion, a major credit bureau, experienced a data breach on **July 28** via a compromised third-party application. While hackers did not access core credit reports, they obtained **Social Security numbers and birth dates** of **69,000 Wisconsin residents** and **4 million people nationwide**. The exposed data—critical for identity theft—poses long-term risks, including unauthorized credit applications, loans, or fraud. Victims like Howard Pope, a Waupaca resident, reported receiving breach notifications and proactively froze their credit, but uncertainty remains about when or how attackers might exploit the stolen information. Wisconsin’s consumer protection agency confirmed TransUnion has not disclosed the perpetrators or their motives. The breach underscores vulnerabilities in systems handling sensitive personal data, with officials urging affected individuals to monitor credit reports weekly (via **annualcreditreport.com**) and utilize free credit monitoring offered by TransUnion. The incident highlights systemic risks when even credit bureaus—tasked with safeguarding financial identities—fail to prevent exposures.
Source: https://www.wbay.com/2025/09/19/consumer-first-alert-dealing-with-unknowns-data-breaches/
TPRM report: https://www.rankiteo.com/company/transunion
"id": "tra1432414091925",
"linkid": "transunion",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '4,000,000 (including 69,000 in '
'Wisconsin)',
'industry': 'Financial Services',
'location': 'Global (HQ in Chicago, IL, USA)',
'name': 'TransUnion',
'size': 'Large (publicly traded, Fortune 500)',
'type': 'Credit Bureau'}],
'attack_vector': 'Third-party application vulnerability',
'customer_advisories': ['Letters sent to affected individuals offering free '
'credit monitoring.',
'Public notifications via Wisconsin DATCP data breach '
'page.'],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '4,000,000 (69,000 in Wisconsin)',
'personally_identifiable_information': ['Social Security '
'numbers',
'birth dates'],
'sensitivity_of_data': 'High (SSNs and birth dates are '
'immutable identifiers)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2024-07-28',
'description': 'TransUnion, one of the three major credit bureaus, '
'experienced a data breach on July 28 involving a third-party '
'application. While hackers did not access credit reports or '
'core credit information, they obtained Social Security '
'numbers and birth dates of 69,000 individuals in Wisconsin '
'and 4 million people nationwide. The breach raises concerns '
'about potential identity theft and financial fraud, as the '
'exposed data (SSNs and birth dates) are critical for identity '
'verification. TransUnion is offering free credit monitoring '
'to affected individuals, and authorities advise freezing '
'credit reports and monitoring accounts for suspicious '
'activity.',
'impact': {'brand_reputation_impact': 'Moderate (public distrust in credit '
'bureau security)',
'data_compromised': ['Social Security numbers', 'birth dates'],
'identity_theft_risk': 'High (SSNs and birth dates exposed)',
'systems_affected': ['Third-party application']},
'investigation_status': 'Ongoing (limited details disclosed by TransUnion)',
'motivation': 'Likely financial gain (identity theft/fraud)',
'recommendations': ['Freeze credit reports with all three major bureaus '
'(TransUnion, Equifax, Experian)',
'Monitor credit reports weekly via annualcreditreport.com',
'Change TransUnion account passwords/PINs if applicable',
'Enroll in free credit monitoring offered by TransUnion',
'Remain vigilant for signs of identity theft (e.g., '
'unauthorized accounts, loans, or credit inquiries)'],
'references': [{'date_accessed': '2025-01-01',
'source': 'WBAY (ABC Affiliate, Green Bay, WI)',
'url': 'https://www.wbay.com'},
{'source': 'Wisconsin Department of Agriculture, Trade and '
'Consumer Protection (DATCP)',
'url': 'https://datcp.wi.gov'}],
'regulatory_compliance': {'regulatory_notifications': ['Wisconsin Department '
'of Agriculture, Trade '
'and Consumer '
'Protection (DATCP)']},
'response': {'communication_strategy': ['Direct mail notifications',
'Public advisories via Wisconsin '
'DATCP'],
'incident_response_plan_activated': 'Yes (letters sent to '
'affected individuals)',
'remediation_measures': ['Free credit monitoring offered to '
'victims']},
'stakeholder_advisories': ['Wisconsin consumer protection officials advise '
'credit freezes and monitoring.',
'TransUnion recommends password/PIN changes for '
'account holders.'],
'title': 'TransUnion Data Breach Affecting 4 Million Individuals',
'type': 'Data Breach'}