Consumer complaint received 2024-09-24 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Incorrect information on your report — Information belongs to someone else
Company: TRANSUNION INTERMEDIATE HOLDINGS, INC.
State: MD

Complaint narrative:
Re : Dispute of Inaccurate Credit Reporting Due to Data Breaches, Privacy Violations, and Identity Theft Dear Sir or Madam, I am writing to formally dispute and bring to your attention the persistent inaccuracies, unauthorized accounts, and inquiries appearing on my credit reports. These issues are a direct result of multiple data breaches by your companies, specifically XXXX, TransUnion, and XXXX, over the past decade, including the recent XXXX Social Security data breach via XXXX XXXX XXXX. This breach further compromised my personal information, which has been misused by third parties to open accounts and inquiries without my consent or knowledge. 

I have experienced significant hardships, including denied access to financial products, unfavorable credit terms, and undue stress due to unauthorized accounts and collections that have been reported in my name. Despite my multiple disputes and attempts to seek assistance, your agencies have taken no effective action to correct these errors. Additionally, your agencies have engaged in predatory marketing by offering identity theft protection services for a fee, despite being responsible for the breach and mishandling of my private information. 

Recent XXXX Social Security Data Breach : In XXXX, the XXXX XXXX XXXX breach exposed millions of Social Security numbers and other sensitive personal data. As part of this breach, my Social Security number and associated personal information were compromised and have since been used for fraudulent activities, including the opening of unauthorized accounts and the appearance of multiple hard and soft inquiries on my credit reports. 

The unauthorized use of my Social Security number in the XXXX breach is yet another example of the failure by your agencies to protect sensitive consumer information. 

Data Breaches Over the Past Decade : XXXX XXXXXXXX XXXX XXXX XXXX ) : One of the largest breaches in history, affecting XXXXXXXX XXXX XXXX including myself. Social Security numbers, addresses, credit card numbers, and other sensitive data were exposed. 
XXXXXXXX XXXX failure to secure my personal information is a direct violation of federal laws, including the Fair Credit Reporting Act ( FCRA ) and the Federal Trade Commission ( FTC ) Act. 
XXXX XXXX XXXX ( XXXX ) : XXXX exposed the personal information of XXXX XXXX customers, including mine, to unauthorized third parties. This breach also resulted in the misuse of my data to create unauthorized accounts and inquiries. 
TransUnion Breach Incidents ( XXXXXXXX XXXX XXXX  ) : TransUnion faced multiple security incidents, including one in XXXX and another in XXXX. My personal information was compromised in both breaches, resulting in unauthorized use of my data to open accounts and inquiries. 
These breaches have led to unauthorized accounts, collections, and inquiries, which I have detailed in previous correspondence. Despite being aware of these breaches, the credit bureaus have failed to protect consumer information, leading to misuse of my data and significant financial harm. 

Over the years, I have had to deal with unauthorized accounts, collections, and inquiries, including XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX none of which I am responsible for. Unauthorized Hard and Soft Inquiries XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX inaccurate late payments that do not belong to me. 
These issues have made it nearly impossible for me to qualify for favorable financial products, loans, or services. 

Violations of Federal and Maryland State Laws : Fair Credit Reporting Act ( FCRA ) Violations : Your agencies have failed to maintain accurate credit reporting and have not properly investigated my disputes within the 30-day requirement mandated by the FCRA ( 15 U.S.C. 1681 ). You have allowed the continued reporting of inaccurate and fraudulent information on my credit reports, despite multiple notifications. 
Additionally, the FCRA obligates credit reporting agencies to protect consumer information, and the mishandling of my data in these breaches is a violation of this responsibility. 
Fair Debt Collection Practices Act ( FDCPA ) Violations : Debt collectors have unlawfully attempted to collect on debts that do not belong to me, and your agencies have allowed these collections to appear on my credit report in violation of the FDCPA ( 15 U.S.C. 1692 ).

Federal Trade Commission ( FTC ) Act Violations : The FTC Act ( 15 U.S.C. 45 ) prohibits unfair or deceptive practices in commerce. The breach of my personal information and the predatory marketing of identity theft protection services by your agencies fall under this violation. 
Maryland Consumer Protection Act ( MCPA ) Violations : Under the MCPA ( MD. Code Ann., Com. Law 13-101 et seq. ), it is illegal to engage in unfair or deceptive trade practices, including the unauthorized and inaccurate reporting of my credit information. Your failure to take corrective action despite my repeated disputes is a clear violation of this law. 
Maryland Personal Information Protection Act ( PIPA ) : The misuse and failure to protect my personal information after the data breaches are violations of PIPA ( MD. Code Ann., Com. Law 14-3501 et seq. ), which mandates that consumer data be secured and that breaches be managed responsibly.

Predatory Practices : Your agencies handling of my personal information has not only resulted in harm but has also perpetuated predatory practices. It is unacceptable that your agencies offer identity theft protection services for a fee when the breaches of my personal data occurred under your watch. This is a blatant attempt to profit from your own failings, exacerbating the harm already done. 

Requested Action : I am requesting the following immediate actions : Remove all unauthorized accounts, collections, and inquiries from my credit reports, as detailed above. 
Provide a thorough investigation of the data breaches that affected my personal information and explain how my data was used in the accounts and inquiries that were opened. 
Notify any third parties to whom my personal information was sold or disclosed without my consent, and ensure that these parties delete my data from their records. 
Compensate for the financial hardship caused by the inaccurate reporting and predatory practices. 
Please respond to this dispute within 30 days as required by law. Failure to address these violations will result in further legal action. 

Thank you for your prompt attention to this matter. 

Sincerely, XXXX XXXX

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with non-monetary relief