TransUnion data breach
Was I affected?
TransUnion confirmed a breach affecting about 4.5 million people, exposing names, Social Security numbers, dates of birth and addresses. You may be affected if you contacted TransUnion consumer support and received a TransUnion breach letter in late August 2025 or later.
| Announced | Aug 28, 2025 |
|---|---|
| When it happened | July 28, 2025 |
| People affected | 4.5 million |
| Data exposed | Names, Social Security numbers, Dates of birth, Addresses, Phone numbers and Email addresses |
| Through a vendor | Salesforce (third-party consumer support app; reported) |
| Status | Confirmed by the company or a regulator filing |
What happened
Credit bureau TransUnion told Maine regulators that 4,461,511 people were affected after attackers accessed a third-party application used by its US consumer support team on July 28, 2025. Notices and press samples show names, Social Security numbers, dates of birth and contact details were exposed; TransUnion said its core credit database and credit reports were not touched. Reporting linked the theft to the Salesforce-targeting ShinyHunters campaign.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Enroll in the 24 months of free credit monitoring TransUnion offered.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
- Pull your free credit reports at AnnualCreditReport.com and dispute any account or inquiry you don't recognize.
Check the other services you use →
Sources
- TransUnion data breach impacts 4.4 million · SecurityWeek (news)
- TransUnion data breach may have affected 4.4 million users · TechRadar (news)