TransUnion faces second class action over data breach involving 4.4 million individuals

TransUnion class action overview:

• Who: Plaintiff Howard Herships filed a class action lawsuit against TransUnion LLC.
• Why: Herships claims the company failed to properly secure and safeguard customer information in a July 2025 data breach.
• Where: The TransUnion class action lawsuit was filed in Illinois federal court.

A new class action lawsuit alleges that TransUnion failed to properly secure and safeguard the personally identifiable information (PII) of more than 4.4 million individuals that was compromised in a data breach earlier this year.

Plaintiff Howard Herships claims the TransUnion data breach occurred on or around July 28, 2025, after unauthorized actors gained access to a third-party application used by TransUnion for its U.S. consumer support operations.

Herships argues TransUnion failed to implement adequate cybersecurity measures to protect the PII of himself and other class members, particularly in its reliance on third-party vendors.

“Plaintiff and class members are now at a significantly increased and certainly impending risk of fraud, identity theft and similar forms of criminal mischief,” the TransUnion class action lawsuit says.

Herships wants to represent a nationwide class of individuals in the U.S. whose PII was compromised in the TransUnion data breach. He claims TransUnion is guilty of negligence, negligence per se, breach of implied contract and unjust enrichment.

TransUnion data breach involved 4.4 million individuals, class action claims

Herships claims the TransUnion data breach involved the exposure of names, birthdates and Social Security numbers of more than 4.4 million individuals.

The plaintiff argues that TransUnion’s reliance on undisclosed third-party vendors for operational efficiency and scale contributed to the vulnerability exploited in the data breach.

“The unauthorized actors targeted a trusted vendor’s application, leveraging the trust relationship to infiltrate TransUnion’s systems,” the TransUnion class action lawsuit says.

Herships claims TransUnion’s conduct in connection with the data breach demonstrates a failure to exercise reasonable care in safeguarding customer data.

The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of compensatory, punitive and/or nominal damages for himself and all class members.

Another lawsuit over the same TransUnion data breach was filed shortly after the incident in Illinois federal court.

What do you think of the claims made in this TransUnion class action lawsuit? Join the discussion in the comments.

Herships is represented by Amy Keller and Rebecca Trickey of DiCello Levitt LLP and Norman E. Siegel, Barrett J. Vahle and Tanner J. Edwards of Stueve Siegel Hanson LLP.

The TransUnion class action lawsuit is Herships v. TransUnion LLC, Case No. 1:25-cv-15428, in the U.S. District Court for the Northern District of Illinois, Eastern Division.

Read About More Class Action Lawsuits & Class Action Settlements:

• Smucker pet food PFAS class action lawsuit moves toward certification
• 700Credit data breach impacts 5.8M individuals
• BMW recalls nearly 37,000 X3 SUVs due to unintentional steering issue
• Google class action claims company deleted Google Drive users’ data without warning