topic Transunion discloses data breach, 4.4 million+ believed impacted in Credit in the News

Transunion discloses data breach, 4.4 million+ believed impacted

coldfusion — Thu, 28 Aug 2025 15:16:02 GMT

Occurred on July 28th, discovered July 30th.

https://cybernews.com/security/transunion-third-party-data-breach-customers-exposed/

I'm sure there are other articles out there.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Patient957 — Thu, 28 Aug 2025 15:30:49 GMT

Great

Re: Transunion discloses data breach, 4.4 million+ believed impacted

crystal626 — Thu, 28 Aug 2025 20:31:40 GMT

Personal info that's already been out in 50 other breaches? I'm numb to it at this point.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

TrapLine — Fri, 29 Aug 2025 00:16:23 GMT

@crystal626 wrote:
Personal info that's already been out in 50 other breaches? I'm numb to it at this point.

Time for a refreshment to dull the pain

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Jnbmom — Fri, 29 Aug 2025 00:46:01 GMT

Oh goody another 5.00 settlement check 😂🙄

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Realist — Fri, 29 Aug 2025 14:50:23 GMT

Many cybersecurity events are a weakness on behalf of employees for lack of awareness, not so much as a brute force attack on a target. Although, cloud based databases, it's a nice honey pot of information, all gathered into one generous place. Just go after the honeypot if you want it all.

Instead, it's usually the employees using corporate assets while engaging in personal email or platforms. Responding to phishing emails. Not keeping personal separate from business, and even then corporate email does hold some phishing possibilities. It's typically not the IT crew that will allow for this type of vulnerability, but that also doesn't mean they're flawless either. I do know of some personal events where an CIO dropped the ball and compromised an entire company unintentionally. Kind of funny actually, but it was an expensive mistake.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

FlaDude — Fri, 29 Aug 2025 14:49:07 GMT

@Jnbmom wrote:
Oh goody another 5.00 settlement check 😂🙄

5-10 years from now, probably only worth 3.50 in todays dollars.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

CreditCuriosity — Fri, 29 Aug 2025 15:49:22 GMT

@FlaDude wrote:
@Jnbmom wrote:
Oh goody another 5.00 settlement check 😂🙄
5-10 years from now, probably only worth 3.50 in todays dollars.

Right. Probably awaiting payment on like 4-5 class action lawsuits or so. Not even the $ that matters as the lawyers are the ones that get rich off of them.

All our data is out there in so many places we all should be numb to it at this point. Bad secuirty and/or bad employee training among other factors.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Realist — Fri, 29 Aug 2025 17:49:03 GMT

I think the last one we received was something like $17. Felt like a high roller when that one came in.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

cashorcharge — Fri, 29 Aug 2025 18:44:23 GMT

Re: Transunion discloses data breach, 4.4 million+ believed impacted

AndySoCal — Sun, 31 Aug 2025 01:37:11 GMT

I received a letter today that I am one of the ones affected by this breach. I will get free credit monitoring for 2 years. Currently all credit bureau and Chex systems reports are frozen. All other accounts steps to secure those accounts has been taken long ago.This breach with my name SSN and DOB I have lost track of how many my info has been in.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Thomas_Thumb — Sun, 31 Aug 2025 18:15:04 GMT

I've been notified of 7 or 8 data breaches involving my personal info. The free credit monitoring (multiple concurrent plans) has not provided any real value. Three of my credit cards have still been hit with fraudulent charges necessitating CC number changes.

I did freeze my CRA files a couple years back and submitted fraud notifications. I believe the fraud alerts remain active for 5 years. So far no fraudulent accounts opened in my name.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Yawgoog — Sun, 31 Aug 2025 22:50:41 GMT

‘Big Balls’ in Biggest Ever Social Security Leak: Whistleblower (August 26)
https://www.yahoo.com/news/articles/big-balls-biggest-ever-social-172516854.html

"A Social Security whistleblower says hundreds of millions of Americans are at risk after their personal data was recklessly uploaded to a vulnerable cloud server, which one of the most notorious DOGE operatives, “Big Balls,” could access."

"Charles Borges, the Social Security Administration’s chief data officer, said DOGE members uploaded a database containing records of all Social Security numbers issued by the federal government, full names, addresses, birth dates and other details that could be used to steal their identities, according to the complaint obtained by the New York Times."

Re: Transunion discloses data breach, 4.4 million+ believed impacted

coldfusion — Mon, 01 Sep 2025 10:29:52 GMT

@Thomas_Thumb wrote:
I believe the fraud alerts remain active for 5 years. So far no fraudulent accounts opened in my name.

A standard fraud alert remains in place for 1 year. If you have evidence of being a fraud victim (like a a police report) or identity theft you can place an extended alert which will remain active for 7 years.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

coldfusion — Mon, 01 Sep 2025 11:04:33 GMT

@Yawgoog wrote:
‘Big Balls’ in Biggest Ever Social Security Leak: Whistleblower (August 26)
https://www.yahoo.com/news/articles/big-balls-biggest-ever-social-172516854.html

Low quality ragebait article. If placing Restricted or Compartmented data in a public cloud was inherently reckless with the data inherently made vulnerable a lot of FDIC and NCUA member institutions and the cybersecurity companies with regulatory approval to provide them services would be in a world of deep doodoo, never mind the business impact to AWS and Azure.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Thomas_Thumb — Mon, 01 Sep 2025 21:58:07 GMT

@coldfusion wrote:
@Thomas_Thumb wrote:
I believe the fraud alerts remain active for 5 years. So far no fraudulent accounts opened in my name.
A standard fraud alert remains in place for 1 year. If you have evidence of being a fraud victim (like a a police report) or identity theft you can place an extended alert which will remain active for 7 years.

I filed a FTC idenity theft report. My recollection was the timeline was 5 years, not 7. Both 5 years and 7 years are mentioned by Experian in their summary (refer to details in below link). However, the 5 years applied specifically to prescreened credit such as CC solicitations. At the time my focus was on CCs.

https://www.experian.com/blogs/ask-experian/do-fraud-alerts-expire/

Re: Transunion discloses data breach, 4.4 million+ believed impacted

MarkintheHV — Wed, 03 Sep 2025 18:36:57 GMT

I got my letter today. I find it interesting how they never reveal the "third parties" when they notify us.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

Thomas_Thumb — Sat, 06 Sep 2025 17:24:07 GMT

A double email alert from AMEX today. Someone tried twice to link my AMEX account to an Apple Pay wallet. Link up denied.

Looks like another replacement AMEX card with a new #.

P.S. Glad I only have 5 cards. Able to respond to attemped fraud and fraudulent charges in a timely manner.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

crystal626 — Sat, 06 Sep 2025 18:36:30 GMT

@Thomas_Thumb wrote:
A double email alert from AMEX today. Someone tried twice to link my AMEX account to an Apple Pay wallet. Link up denied.

Looks like another replacement AMEX card with a new #.

P.S. Glad I only have 5 cards. Able to respond to attemped fraud and fraudulent charges in a timely manner.

They need to make it a requirement that you have to take a picture of the card and tap it to the phone to add it to Apple Pay so they have proof you actually have the card. Manual number entry should not be an option. Glad that AMEX caught it though at least.

Re: Transunion discloses data breach, 4.4 million+ believed impacted

AndySoCal — Sun, 07 Sep 2025 00:32:38 GMT

@Thomas_Thumb If it were me I would change the user name and password on the AMEX Account at a minimum plus 2FA. Also add controls if you have not already. The other question that remains is if they have that card what else might they have.