TransUnion LLC Confirms Recent Data Breach

Topic

New Reply

TransUnion LLC Confirms Recent Data Breach with State Attorney General’s Office

On November 7, 2022, TransUnion LLC reported a data breach with the Massachusetts Attorney General after information in the company’s possession was subject to unauthorized access. According to TransUnion, the breach resulted in the names, Social Security numbers, financial account numbers and driver’s license numbers being compromised…

While the total number of people affected by the TransUnion data breach remains unknown at this point, the company has stated that it possesses “200 million files profiling nearly every credit-active consumer in the United States.”…

8 users thanked author for this post.

Steve, Nibbled To Death By Ducks, Just another Forum Poster, WCHS, bradam, SueW, JohnW, windbg

Reply | Quote

Replies

@Alex5723, thank you for posting this. The article in the referenced link also states, in two different paragraphs:

“Recently, TransUnion sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.”

“On November 7, 2022, TransUnion sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.”

May none of us who live in MA get one of these data breach letters!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

SueW wrote:

May none of us who live in MA get one of these data breach letters!

The breach doesn’t concern only MA resident as TransUnion has data for 200M credit card customers.

Reply | Quote

Thanks, Alex.

Ow. Ow. Ow.

…and just two days after Experian, a 6 Billion dollar company, was wrist-slapped for 13 million a few days ago for a similar breach in 2017. (#2496848)

Let’s also hope that the penalties are more in line with the company’s size this time and it doesn’t take five years.

Who, mainly, besides private law firms (class action) and the FTC, is responsible for fining these companies?

I think come Monday I’m going to call my elected reps on this issue. This is beyond outrageous. The identity theft my wife and I endured from the previous Experian breach haunted both of us for a long time.

Here we go again.

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

2 users thanked author for this post.

Charlie, Alex5723

Reply | Quote

Nibbled To Death By Ducks wrote:

Who, mainly, besides private law firms (class action) and the FTC, is responsible for fining these companies?

The States:

All 50 states, the District of Columbia, Guam, Puerto Rico and the Virgin Islands have laws requiring private businesses, and in most states, governmental entities as well, to notify individuals of security breaches of information involving personally identifiable information.

Security Breach Notification Laws [State Legislatures]

Because there is no federal data breach law:

Such laws have been irregularly enacted in all 50 U.S. states since 2002. Currently, all 50 states have enacted forms of data breach notification laws. It should be noted though, that there is no federal data breach notification law, despite previous legislative attempts.

Security breach notification laws [Wikipedia]

1 user thanked author for this post.

Nibbled To Death By Ducks

Reply | Quote

Because there is no federal data breach law

This is because our elected officials, more often than not, do nothing to protect us.  Which is their job!!!  It’s just terrible that in 2022, there still isn’t any protection (with teeth) for us. I have had our credit files frozen since Equifax.  We have an ID monitoring service (mostly to help if we are breached so I don’t have to do it myself).  I try to use disposable emails. But our data is out there and I can’t do anything about it.

The breaches continue, people suffer great harm/damage while those responsible for the breaches (criminals and companies) are not held accountable.  For companies, it seems it’s just a cost of doing business at this point and the cost isn’t that great – for them! Donna

 

Reply | Quote

Notification laws – so they have to notify the victims of a blatant and serious crime. Does it happen to mention that the perps are to be hunted down and imprisoned for a good long time?

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

2 users thanked author for this post.

Nibbled To Death By Ducks, wavy

Reply | Quote