TransUnion Data Breach Impacts 4.4 Million

TransUnion has disclosed that more than 4.4 million people were affected by a data breach, with 4,461,511 individuals identified as impacted. The incident occurred on 28 July 2025 and was discovered two days later, according to a filing with the Maine Attorney General’s Office.

The breach involved personal information stored in a third‑party application used for its US consumer support operations, including names, Social Security numbers and dates of birth, while credit reports or core credit information were not said to be affected. In addition to the above, addresses, email addresses and phone numbers were reportedly stolen, though TransUnion said the data elements exposed were limited.

The firm is providing 24 months of free credit monitoring and proactive fraud assistance to those impacted. It did not name the third‑party application but noted that the breach appears linked to a broader Salesforce‑related data theft campaign, with the extortion group ShinyHunters named by external reports as responsible. The article also notes that securityweek has sought comment from TransUnion for a response to these claims.