TransUnion Risk and Alternative Data Solutions

The Vermont Office of the Attorney General disclosed on **October 2, 2024**, that **TransUnion Risk and Alternative Data Solutions (TRADS)** suffered a data breach involving **unauthorized access to consumer personal data**. The incident occurred over an unspecified period, with the investigation launched on **July 24, 2024**, and concluding on **September 10, 2024**. While TRADS’s internal security systems were confirmed **not compromised**, the breach resulted in the exposure of consumer information, including **names and other unspecified personal data elements**. The exact scope of the exposed data remains undisclosed, but the incident highlights vulnerabilities in third-party data handling, raising concerns over potential misuse of sensitive consumer information. No evidence of financial fraud or large-scale identity theft has been reported thus far, but the exposure of personal identifiers poses risks of targeted phishing, identity theft, or reputational harm to affected individuals.

Source: https://ago.vermont.gov/document/2024-10-02-transunion-risk-and-alternative-data-solutions-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/transunion

"id": "tra156082025",
"linkid": "transunion",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Credit Reporting / Data Solutions',
                        'location': 'United States (Vermont jurisdiction '
                                    'reported)',
                        'name': 'TransUnion Risk and Alternative Data '
                                'Solutions (TRADS)',
                        'type': 'Corporation'}],
 'data_breach': {'data_exfiltration': 'Yes (unauthorized access confirmed)',
                 'personally_identifiable_information': 'Yes (names)',
                 'sensitivity_of_data': 'Moderate (personal identifiers)',
                 'type_of_data_compromised': ['Personal Data (names)',
                                              'unspecified data elements']},
 'date_publicly_disclosed': '2024-10-02',
 'date_resolved': '2024-09-10',
 'description': 'The Vermont Office of the Attorney General reported that '
                'TransUnion Risk and Alternative Data Solutions (TRADS) '
                'experienced unauthorized access to consumer data between an '
                'unspecified date range. The breach investigation began on '
                'July 24, 2024, and concluded on September 10, 2024, '
                "confirming no compromise of TRADS's security systems but "
                'unauthorized access to personal data, including names and '
                'other unspecified data elements.',
 'impact': {'data_compromised': ['names', 'other unspecified data elements'],
            'identity_theft_risk': 'Potential (due to exposure of personal '
                                   'data)'},
 'investigation_status': 'Concluded (as of 2024-09-10)',
 'post_incident_analysis': {'root_causes': 'Unauthorized access (specifics '
                                           'undisclosed)'},
 'references': [{'date_accessed': '2024-10-02',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont '
                                        'Attorney General',
              'incident_response_plan_activated': 'Yes (investigation '
                                                  'initiated)'},
 'title': 'Unauthorized Access to Consumer Data at TransUnion Risk and '
          'Alternative Data Solutions (TRADS)',
 'type': 'Data Breach / Unauthorized Access'}