On July 30, 2025, TransUnion, one of the three major U.S. consumer credit reporting agencies, was made aware of a major data breach affecting its U.S. consumer support operations.
In total, the incident impacted 4,461,511 people nationwide, including 16,828 residents of Maine. State-specific disclosures report that 377,357 Texans and 16,828 Maine residents were among those affected.
According to the disclosure to the Texas Attorney General, the exposed information includes names, Social Security numbers and dates of birth. According to TransUnion, the breach did not compromise credit reports or core credit information as the incident was limited to certain personal data stored on the third-party system supporting consumer support functions.
TransUnion began to notify affected consumers by U.S. Mail on Aug. 26, 2025. In addition to the Texas AG disclosure, the breach has also been reported to the California Attorney General and the Maine Attorney General.
In response to the breach, TransUnion has enhanced its security controls and continues to monitor its systems for any suspicious activity. To support those impacted, TransUnion is offering complimentary credit monitoring and identity protection services for 24 months through its myTrueIdentity platform. These services include credit monitoring, identity protection, identity resolution support and $1 million in identity theft insurance.
Affected individuals are encouraged to enroll in the free credit monitoring service within 90 days of receiving their notification letter. Enrollment requires an internet connection and email account. Additionally, TransUnion is providing proactive fraud assistance through Cyberscout, a TransUnion company specializing in fraud remediation.
TransUnion also recommends that consumers take the following precautions:
For questions or additional information, affected consumers can call the dedicated support line at 800-516-4700, Monday through Friday from 8 a.m. to 8 p.m. Eastern Time, except major holidays.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.