Supply chain β›“ Supply Chain

TransUnion Third-Party Breach (August 2025)

πŸ“… 2025-08-01 🏒 Salesforce
Primary Source β†—

Incident Details

TransUnion suffers data breach impacting over 4.4 million people. Consumer credit reporting giant TransUnion warns it suffered a data breach exposing the personal information of over 4.4 million people in the United States, with BleepingComputer learning the data was stolen from it’s Salesforce account. Update: Story updated with confirmation that this was another Salesforce data theft attack and the types of data stolen. TransUnion is one of the three major credit bureaus in the United States, alongside Equifax and Experian. It operates in 30 countries, employs 13,000 staff, and has an annual revenue of $3 billion. Third-party company: Salesforce.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Salesforce
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-08-01 Breach occurred
  2. 2025-08-28 Publicly disclosed