Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

TransUnion

Disclosed Aug 26, 20254,461,511 affectedConfirmed

Official notice

TransUnion third-party app breach exposes 4.4 million consumers

TransUnion told Maine's attorney general that a July 28, 2025 breach of a third-party application used for US consumer support exposed personal data of more than 4.4 million people, including names, birth dates and SSNs (a data sample also showed addresses, phones and emails); it said no credit information was accessed.

What is known

People affected4,461,511 (as reported by the organization)
DisclosedAug 26, 2025
DiscoveredJul 29, 2025
HappenedJul 28, 2025
AttackVendor breach
Data exposedNamesDates of birthSocial Security numbersAddressesPhone numbersEmails
SectorFinance · US
StatusConfirmed
Part ofSalesforce (2025)

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: TransUnion
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: TransUnion
Official noticejustice.oregon.gov
Oregon DOJ breach notice: TransUnion
Newstechcrunch.com
TransUnion says hackers stole 4.4 million customers' personal information
Newsbleepingcomputer.com
TransUnion suffers data breach impacting over 4.4 million people
Official noticeago.vermont.gov
Vermont Attorney General: 2025-09-01 TransUnion Data Breach Notice to Consumers
Official noticein.gov
Indiana Attorney General 2025 data breach report: TransUnion

Notices filed

Residents of DEAug 26, 2025
Delaware DOJ21,043 people
Residents of INAug 26, 2025
Indiana AG88,898 people
Residents of CAAug 27, 2025
California AGCount not stated
TotalAug 28, 2025
Research4,400,000 people
Residents of VTSep 1, 2025
Vermont AGCount not stated
Residents of ORSep 2, 2025
Oregon DOJ4,461,511 people

Same campaign

GainsightSupply chain exposed names, emails and phone numbers.Supply chainTechUSUnverifiedNov 19, 2025StellantisVendor breach exposed names, emails, phone numbers and addresses.Vendor breachManufacturingNLUnverifiedSep 21, 2025KeringShinyHunters steal Gucci, Balenciaga and other Kering customer dataHackingRetailFRUnverifiedSep 15, 2025WorkivaVendor breach exposed names, emails and phone numbers.Vendor breachTechUSUnverifiedSep 3, 2025Farmers InsuranceVendor breach exposed names, addresses, dates of birth, government IDs and Social Security numbers.Vendor breach1.1M affectedInsuranceUSUnverifiedAug 22, 2025WorkdayPhishing exposed names, emails and phone numbers.PhishingTechUSUnverifiedAug 15, 2025Air France-KLMAir France and KLM customer service platform breachedVendor breachTransportFRAug 6, 2025PandoraVendor breach exposed names, dates of birth and emails.Vendor breachRetailDKUnverifiedAug 5, 2025GoogleShinyHunters steal business contact data from Google Salesforce instancePhishingTechUSUnverifiedAug 5, 2025CiscoVishing attack on Cisco CRM exposes Cisco.com user profilesPhishingTechUSUnverifiedAug 4, 2025ChanelVendor breach exposed names, emails, addresses and phone numbers.Vendor breachRetailFRUnverifiedAug 4, 2025Allianz LifeSalesforce CRM social engineering exposes 1.5 million Allianz Life recordsPhishing1.5M affectedInsuranceUSUnverifiedJul 26, 2025Louis VuittonHacking exposed names, phone numbers, emails and addresses.HackingRetailFRUnverifiedJul 10, 2025QantasCall center hack exposes 5.7 million Qantas customers' recordsVendor breach5.7M affectedTransportAUUnverifiedJul 2, 2025TiffanyVishing attack on Tiffany Korea exposes customer dataPhishing4,600 affectedRetailUSMay 26, 2025AdidasVendor breach exposed names, emails, phone numbers, dates of birth and addresses.Vendor breachRetailDEUnverifiedMay 23, 2025DiorVendor breach exposed names, phone numbers, emails and addresses.Vendor breachRetailFRUnverifiedMay 13, 2025

Other breaches at TransUnion

Breach, details not statedBreach notice filed with the California AG, details not stated.12K affectedFinanceUSAug 4, 2022Breach, details not statedExposed names, Social Security numbers, government IDs, payment cards and names. Reported to the Maine AG.FinanceUSOct 23, 2018
History of this record
records2026-09-25
4400000 to 4461511by backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2025-09-01-transunion-data-breach-notice-consumersby backfillSource
campaign2026-09-25
empty to salesforce-2025by seedSource
sector2026-09-25
other to financeby seedSource
attack2026-09-25
unknown to third-partyby seedSource
data_types2026-09-25
["names"] to ["names","dob","ssn","addresses","phone","emails"]by seedSource
records2026-09-25
4461511 to 4400000by seedSource
summary2026-09-25
empty to TransUnion told Maine's attorney general that a July 28, 2025 breach of a third-party application used for US consumer support exposed personal data of more than 4.4 million people, including names, birth dates and SSNs (a data sample also by seedSource
title2026-09-25
empty to TransUnion third-party app breach exposes 4.4 million consumersby seedSource
data_types2026-09-25
[] to ["names"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 4461511by backfillSource
disclosed2026-09-25
2025-08-27 to 2025-08-26by backfillSource
discovered2026-09-25
empty to 2025-07-29by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about TransUnion