TransUnion data breach overview:
- Who: TransUnion has disclosed a data breach impacting 4,461,511 individuals in the United States.
- Why: The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations.
- Where: The TransUnion recall is active in the United States.
- How to Get Help: Did you receive a letter notifying you that your information was compromised in the Salesforce or Farmers Insurance data breach? See if you’re eligible to pursue compensation.
TransUnion, a credit reporting firm, has announced a data breach affecting over 4.4 million U.S. consumers due to unauthorized access to a third-party application used in its consumer support operations.
TransUnion has emphasized that its core credit database and credit reports remain secure.
The breach, which occurred on July 28, 2025, was discovered two days later and involved the exposure of sensitive personal information.
According to the company, the compromised data includes names, dates of birth, Social Security numbers, billing addresses, email addresses, phone numbers, and customer support-related information.
“The incident involved unauthorized access to limited personal information for a very small percentage of U.S. consumers,” the company said.
Hackers reportedly stole 13 million records in total, with 4.4 million records tied to U.S. consumers. The breach is part of a broader wave of cyberattacks targeting companies through Salesforce-linked applications, exploiting weaknesses in third-party integrations. Farmers Insurance recently announced a breach affecting more than 1.1 million of its customers.
Researchers have associated these attacks with the extortion group ShinyHunters and similar threat actors.
TransUnion offers free credit monitoring and identity protection
In response to the data breach, TransUnion is offering affected individuals 24 months of free credit monitoring and identity theft protection services. To enroll in credit monitoring services customers can log on to www.mytrueidentity.com and follow the instructions provided.
The company has also taken steps to enhance its security measures to prevent similar incidents in the future.
“We are working with law enforcement and have engaged third-party cybersecurity experts for an independent forensics review,” the recall notice says.
Consumers seeking more information about the breach can visit TransUnion’s website or contact their toll-free number at 1-800-516-4700 for assistance. This call center is open Monday through Friday from 8a.m.–8 p.m. Eastern time, except major holidays
TransUnion says it has not received any reports of identity theft or fraud related to the breach so far. The company is not currently facing legal action over the recall, but incidents like these sometimes lead to class action lawsuits.
Are you affected by this TransUnion recall? Let us know in the comments.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
- Albertsons class action alleges ‘hypoallergenic’ body wash contains known allergens
- Class action alleges Disney illegally used hidden trackers on its website
- Michael Jordan–backed Cincoro tequila faces class action lawsuit over ‘100% agave’ claim
- Class action lawsuit claims Globe Life used outlawed ‘Good Faith Defense’ to deny benefits
One thought on TransUnion announces Salesforce-linked data breach affecting 4.4 million Americans
I continue to get fraudulent emails saying they are transunion. They have a li k in them sending me to log into my bank info. Not a good situation.