TransUnion notifying more than 4.4 U.S. million consumers of data breach (1)

TransUnion reported to the Maine AG a July 28, 2025 breach impacting 4,461,511 U.S. consumers via a third‑party application serving its U.S. consumer support operations, offering 24 months of credit monitoring while disclosing few technical details. The threat group ShinyHunters claimed responsibility, asserting theft of 13M+ records from TransUnion’s Salesforce CRM (including 4.4M U.S. SSNs in plaintext) and threatening leaks on the BreachStars forum; TransUnion declined to provide further information.