TransUnion
Disclosed Aug 26, 20251 year ago4,461,511 affectedConfirmed
TransUnion third-party app breach exposes 4.4 million consumers
TransUnion told Maine's attorney general that a July 28, 2025 breach of a third-party application used for US consumer support exposed personal data of more than 4.4 million people, including names, birth dates and SSNs (a data sample also showed addresses, phones and emails); it said no credit information was accessed.
What is known
| People affected | 4,461,511 (as reported by the organization) |
|---|---|
| Disclosed | Aug 26, 2025 |
| Discovered | Jul 29, 2025 |
| Happened | Jul 28, 2025 |
| Attack | Vendor breach |
| Data exposed | Names, Dates of birth, Social Security numbers, Addresses, Phone numbers, Emails |
| Sector | Finance · US |
| Status | Confirmed |
| Part of | Salesforce (2025) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: TransUnionoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: TransUnionattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: TransUnionjustice.oregon.gov · Official notice | Official notice |
| TransUnion says hackers stole 4.4 million customers' personal informationtechcrunch.com · News | News |
| TransUnion suffers data breach impacting over 4.4 million peoplebleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-09-01 TransUnion Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: TransUnionin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Aug 26, 2025 | 21,043 |
| Indiana AGresidents of IN | Aug 26, 2025 | 88,898 |
| California AGresidents of CA | Aug 27, 2025 | |
| Researchtotal | Aug 28, 2025 | 4,400,000 |
| Vermont AGresidents of VT | Sep 1, 2025 | |
| Oregon DOJresidents of OR | Sep 2, 2025 | 4,461,511 |
Same campaign
Other breaches at TransUnion
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Aug 4, 2022Aug 4, 20224 years ago | Aug 4, 20224 years ago | Not stated | Finance | Confirmed | 12K |
| Disclosed Oct 23, 2018Oct 23, 20187 years ago | Oct 23, 20187 years ago | Not stated | Finance | Confirmed | Unknown |
History of this record
- 2026-09-25 · records: 4400000 to 4461511 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-09-01-transunion-data-breach-notice-consumers · backfill source
- 2026-09-25 · campaign: empty to salesforce-2025 · seed source
- 2026-09-25 · sector: other to finance · seed source
- 2026-09-25 · attack: unknown to third-party · seed source
- 2026-09-25 · data_types: ["names"] to ["names","dob","ssn","addresses","phone","emails"] · seed source
- 2026-09-25 · records: 4461511 to 4400000 · seed source
- 2026-09-25 · summary: empty to TransUnion told Maine's attorney general that a July 28, 2025 breach of a third-party application used for US consumer support exposed personal data of more than 4.4 million people, including names, birth dates and SSNs (a data sample also · seed source
- 2026-09-25 · title: empty to TransUnion third-party app breach exposes 4.4 million consumers · seed source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 4461511 · backfill source
- 2026-09-25 · disclosed: 2025-08-27 to 2025-08-26 · backfill source
- 2026-09-25 · discovered: empty to 2025-07-29 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.