Supply chain
β Supply Chain
TransUnion Third-Party Breach (August 2025)
Primary Source βIncident Details
TransUnion suffers data breach impacting over 4.4 million people. Consumer credit reporting giant TransUnion warns it suffered a data breach exposing the personal information of over 4.4 million people in the United States, with BleepingComputer learning the data was stolen from it’s Salesforce account. Update: Story updated with confirmation that this was another Salesforce data theft attack and the types of data stolen. TransUnion is one of the three major credit bureaus in the United States, alongside Equifax and Experian. It operates in 30 countries, employs 13,000 staff, and has an annual revenue of $3 billion. Third-party company: Salesforce.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Salesforce
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-08-01 Breach occurred
- 2025-08-28 Publicly disclosed