TransUnion discloses a data breach impacting over 4.4 million customers

TransUnion disclosed a data breach that impacted more than 4,461,511 customers, according to Security Affairs, and the incident involved a third-party application serving the company’s U.S. consumer support operations. The data breach notification reads that the unauthorized access includes some limited personal information belonging to affected individuals, but the notification did not specify which kind of personal data were compromised and stressed that the accessed data doesn’t include credit information.

TransUnion is providing impacted individuals with access to myTrueIdentity Online (TransUnion) Credit Monitoring services at no charge for 24 months. The article notes that TransUnion is one of the three major credit reporting agencies in the United States and that the breach was disclosed on 28 August 2025, with the information sharing including follow-up statements from the company and a reference to Maine’s attorney general’s office.

According to Maine’s attorney general’s office, the data elements accessed were limited and the company emphasised ongoing enhancements to its security controls to minimise future risk.