TransUnion Reports Data Breach Exposing Over 4 Million US Consumers

Credit reporting agency TransUnion disclosed a data breach impacting over 4.4 million individuals, resulting from unauthorized access to a third-party application used for U.S. consumer support operations. The breach, discovered shortly after it occurred in late July 2025, did not compromise TransUnion's core credit database or credit reports, but exposed various personal data elements, potentially including sensitive identifiers like Social Security numbers. While the exact nature of the stolen information remains unspecified, TransUnion is offering affected customers two years of free credit monitoring and identity theft protection to mitigate risks such as identity theft and phishing attacks. This incident aligns with a recent surge of cyberattacks targeting U.S. corporations through vulnerabilities in Salesforce-hosted cloud databases and third-party service providers. TransUnion emphasized they have contained the breach quickly and have not identified the attackers or any ransom demands. The breach underscores the ongoing challenges for major data aggregators in protecting vast quantities of sensitive consumer information from increasingly sophisticated cyber threats.