By Emily Long
One of the three major U.S. consumer credit bureaus has been breached, leaving the data of more than 4.4 million people exposed to hackers. TransUnion, which maintains credit information on 200 million consumers in the United States and shares that information with 65,000 other organizations, has just disclosed a breach that occurred last month amid the larger Salesforce data theft.
What happened at TransUnion?
According to a data breach notice submitted to the Maine attorney general, a “cyber incident involving a third-party application” occurred at TransUnion on July 28, allowing threat actors unauthorized access to some U.S. consumers’ personal information. The letter being distributed to those affected states that credit reports and “core credit information” were not included in the breach, though the company hasn’t disclosed specifics as to what was compromised. The breach was discovered on July 30.
As BleepingComputer reports, the incident is linked to series of recent attacks carried out by the ShinyHunters hacking group on Salesforce, a major customer relationship management (CRM) platform. Other Salesforce-connected companies that have been impacted include Google, Workday, Allianz Life, and a handful of major retailers like Adidas and LVMH.
What TransUnion customers need to do now
TransUnion began notifying affected consumers on Aug. 26, so be on the lookout for a letter from the company. Anyone whose data were compromised can enroll in 24 months of free credit monitoring provided by My TrueIdentity—which belongs to TransUnion—including identity protection and resolution services and $1 million in identity theft insurance.
To sign up via the My TrueIdentity website, you’ll need the unique activation code from your letter, and you’ll need to provide an email address and verify some personal information. Note that the offer is valid for 90 days from the date of the notice.
If you need to speak to someone at TransUnion about the breach, you can call 800-516-4700 between 8 a.m. and 8 p.m. ET Monday to Friday.
Disclaimer
The information contained in South Florida Reporter is for general information purposes only.
The South Florida Reporter assumes no responsibility for errors or omissions in the contents of the Service.
In no event shall the South Florida Reporter be liable for any special, direct, indirect, consequential, or incidental damages or any damages whatsoever, whether in an action of contract, negligence or other tort, arising out of or in connection with the use of the Service or the contents of the Service. The Company reserves the right to make additions, deletions, or modifications to the contents of the Service at any time without prior notice.
The Company does not warrant that the Service is free of viruses or other harmful components