Consumer complaint received 2025-04-01 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: TRANSUNION INTERMEDIATE HOLDINGS, INC.
State: NY

Complaint narrative:
I am writing to formally notify you that my personal and financial data was compromised in the Equifax data breach that occurred in 2017. As a result, my sensitive information, including Social Security number, birth date, and other private details, may have been exposed to unauthorized individuals.

In light of this breach, I demand that you cease and desist from sharing, selling, or distributing any of my personal and financial information to third parties. This request is based on the fact that my data was unlawfully exposed, and I am taking all necessary measures to protect my privacy and security.

Furthermore, I remind you of the following laws and regulations that support my request : 1. Fair Credit Reporting Act ( FCRA ) - The FCRA mandates that credit bureaus maintain accurate, up-to-date, and secure information. The breach of my data represents a failure to maintain security standards, and under this law, I have the right to dispute the sharing of my data.

15 U.S.C. 1681 et seq. : This statute provides rights to consumers concerning the accuracy and dissemination of their credit information.

2. Gramm-Leach-Bliley Act ( GLBA ) - The GLBA requires financial institutions and credit reporting agencies to safeguard personal information and prevent unauthorized access or disclosure.

15 U.S.C. 6801-6809 : This provision mandates companies, including credit bureaus, to protect consumers ' financial privacy.

3. Right to Data Protection - Under state laws and the General Data Protection Regulation ( GDPR ) ( if applicable to certain businesses operating across states or regions ), I have a right to request the cessation of any further unauthorized distribution of my data.

California Consumer Privacy Act ( CCPA ) : If applicable, the CCPA gives California residents the right to request that businesses stop sharing their personal information with third parties.

GDPR ( if relevant ) : Under GDPR, consumers have the right to restrict the processing and sharing of their data if it has been compromised or exposed.

In addition, I demand that you take the following actions immediately : Cease sharing my information with any third parties or entities, except when explicitly authorized by me or required by law.

Delete any personal data that was acquired through unauthorized access during the Equifax breach, if not already done.

Provide me with written confirmation that my information will no longer be distributed or shared without my consent.

Please respond within 30 days of receiving this notice with confirmation that you have complied with my request. Failure to do so will leave me no choice but to explore further legal actions, including filing a formal complaint with the Federal Trade Commission ( FTC ), or pursuing legal recourse under the FCRA.

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation