Consumer complaint received 2025-06-24 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: TRANSUNION INTERMEDIATE HOLDINGS, INC.
State: IL

Complaint narrative:
XXXXXXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXXXXXX TransUnion LLC XXXX. XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXXXX/XX/XXXX RE : Formal Data Breach Dispute FCRA, FERPA & UCC Violations | Immediate Deletion Required To Whom It May Concern, This letter serves as a formal dispute and demand for immediate deletion of the below-referenced accounts and hard inquiries from my credit profile. My personal and educational data has been compromised as a result of a data breach, and your continued reporting of this inaccurate, unauthorized, and improperly verified information is in direct violation of federal consumer protection laws, including : FCRA Fair Credit Reporting Act FERPA Family Educational Rights and Privacy Act UCC Uniform Commercial Code Accounts to Be Deleted Immediately : Creditor Name : XXXX  Account Number : XXXX Balance : {$3600.00} Creditor Name : XXXX  Account Number : XXXX These are student loan accounts, and under FERPA [ 20 U.S.C. 1232g ], you are prohibited from disclosing or reporting any personally identifiable educational information to third parties without my prior written consent. I have never authorized these loans to be reported to your bureau, especially after my data was compromised. You are now violating my educational privacy rights by continuing to list them. 

Unauthorized Hard Inquiries to Be Deleted Immediately : XXXXXXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXXXX/XX/XXXX I did not authorize these hard inquiries, and no permissible purpose was given under FCRA 1681b ( c ). These inquiries were made without my consent and are a direct result of unauthorized access stemming from a breach. There is no application, no consent, no written authorizationand therefore, no justification for their presence on my report. Legal Notice and Action Plan : Under FCRA 611 and 623 ( b ), 605b,
TransUnion is required to conduct a thorough and reasonable reinvestigation, not rely solely on e-OSCAR.

Under UCC 3-501, I hereby demand you provide original source documentation, including : Proof of permissible purpose Original signed authorization ( if any ) Verification records you used to report this data If TransUnion fails to delete the above entries within 15 days, I will take the following action : File a formal complaint with the Consumer Financial Protection Bureau ( CFPB ) Notify the Federal Trade Commission ( FTC ) Submit a FERPA violation complaint to the XXXXXXXX XXXX XXXX XXXX Initiate a civil lawsuit for statutory and punitive damages under FCRA 616 and 617 This is your final opportunity to correct these serious violations. I expect a formal written response with confirmation of deletion within 15 days. 

Sincerely, XXXX XXXX

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with non-monetary relief