Consumer complaint received 2025-09-28 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: TRANSUNION INTERMEDIATE HOLDINGS, INC.
State: AR

Complaint narrative:
I am filing this formal complaint and demand for regulatory action against TransUnion, LLC, regarding repeated and ongoing violations of my rights as a consumer. 
I have been subjected to : 1. Identity theft and unauthorized use of my personal data.

2. The sale, distribution, and use of my information by third-party companies without my knowledge or consent.

3. A newly disclosed cyber incident ( as of XX/XX/year>, per the attached notice from TransUnion ), involving unauthorized access to my personal information, including my Social Security Number and Date of Birth, through a third-party application. 
This pattern of failures demonstrates not only negligence in protecting consumer information, but also clear violations of federal consumer protection laws and regulations. 
1. Fair Credit Reporting Act ( FCRA ), 15 U.S.C. 1681 et seq.

1681b Permissible purposes of consumer reports : My personal information has been repeatedly disclosed and accessed without permissible purpose or consent.

1681c & 1681c-2 Obsolete and inaccurate information : TransUnion continues to allow unauthorized third parties to obtain, access, and store my data, exposing me to inaccuracies and fraudulent activity.

1681e & 1681e ( b ) Reasonable procedures to assure maximum possible accuracy : By failing to protect my information from unauthorized access and breaches, TransUnion has violated its duty to establish and maintain reasonable procedures.

1681i Duty to investigate disputed information : Prior disputes have not been properly addressed, leading to continued harm.

1681n & 1681o Civil liability for willful and negligent noncompliance : TransUnion has failed in both categories, subjecting me to financial, reputational, and emotional harm.

2. Federal Trade Commission Act ( FTC Act ), 15 U.S.C. 45.

TransUnions failure to safeguard my personal identifying information ( PII ) constitutes unfair and deceptive practices under Section 5 of the FTC Act.

3. Gramm-Leach-Bliley Act ( GLBA ), 15 U.S.C. 68016809.

TransUnion has failed in its obligation to protect the security and confidentiality of consumer records and information.

4. Uniform Commercial Code ( UCC ), Article 9 Secured Transactions.

Unauthorized third-party use and trafficking of my personal identifying information amounts to the unlawful use of intangible property as a form of security without my consent. My identity and credit file are being treated as commodities without proper authorization, violating UCC protections against unauthorized transfers. 
This most recent cyber incident is not an isolated event but part of a broader pattern of disregard for consumer rights. As noted : My personal data has already been compromised by identity theft incidents. 
TransUnion has previously permitted third-party companies to purchase, resell, and use my information without my express consent. 
Now, my Social Security Number and Date of Birth have been exposed in a cyber breach caused by a third-party application serving TransUnions U.S. consumer support operations.

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with non-monetary relief