Consumer complaint received 2025-09-23 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: TRANSUNION INTERMEDIATE HOLDINGS, INC.
State: IL

Complaint narrative:
Category : Credit Reporting Company Improper Use/Disclosure of Information Data Breach Consumer Complaint ( CFPB Portal Text ) : I am filing this complaint regarding TransUnions recent data breach notification letter, received XX/XX/XXXX, which disclosed that my Social Security Number ( SSN ) and Date of Birth ( DOB ) were accessed through a third-party application used by TransUnion for U.S. consumer support. Key Issues : 1. Failure to Safeguard Sensitive Data Under the Fair Credit Reporting Act ( FCRA ), 15 U.S.C. 602, 607 ( b ), 611, TransUnion has a duty to follow reasonable procedures to assure the maximum possible accuracy and confidentiality of consumer information. Under the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 ), TransUnion must establish safeguards to protect nonpublic personal information. The exposure of my SSN and DOB shows these duties were violated. 2. Failure to Provide Timely, Transparent Notice The breach notification letter only states TransUnion recently became aware of the incident, but does not disclose when the breach began, how long the unauthorized access lasted, or which vendor was involved. This is potentially a violation of the Illinois Personal Information Protection Act ( 815 ILCS 530/10 ), which requires expedient notification without unreasonable delay. 3. Unreliable Data Reporting Because my most sensitive identifiers were compromised, I no longer have confidence that TransUnions records and data furnishers reporting are accurate or trustworthy. Pursuant to FCRA 611 ( a ), I demand reinvestigation of all negative tradelines and deletion of any information that can not be independently verified at the furnisher level. Harm Suffered Time spent placing fraud alerts, monitoring accounts, and protecting my identity.

XXXX  and stress from knowing my SSN/DOB are permanently compromised.

Risk of future identity theft, recognized by the Seventh Circuit as concrete injury : Remijas v. Neiman Marcus, 794 F.3d 688 ( 7th Cir. 2015 ).

Dieffenbach v. Barnes & Noble, 887 F.3d 826 ( 7th Cir. 2018 ).

Requested Resolution 1. Full disclosure of : The date TransUnion first discovered the breach, The duration of unauthorized access, The identity of the third-party vendor.

2. Extension of identity theft monitoring and insurance for at least 10 years ( not the limited 24 months offered ).

3. Immediate reinvestigation of my file and deletion of all unverifiable negative tradelines, consistent with FCRA 607 ( b ), 611 and Cushman v. Trans Union Corp., 115 F.3d 220 ( 3d Cir. 1997 ).

4. Written assurances that TransUnion will strengthen vendor oversight and notification practices to comply with federal and state law.

XXXX XXXX XXXX CC : XXXX XXXX XXXX, CEO, TransUnion ( direct notification of corporate liability ).

Illinois Attorney General XXXX XXXX ( enforcement of Illinois Data Breach Law, 815 ILCS 530/10 ).

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation