TransUnion Data Breach Affects 4.4 Million Americans Amid Salesforce Cyberattack Wave

TransUnion, a major credit reporting firm, has confirmed a major data breach affecting 4.4 million U.S. consumers after hackers exploited third-party Salesforce apps to steal personal info.

You might have recently noticed a wave of cyberattacks hitting companies whose services millions of Americans rely on every day. Among the victims are Google, Farmers Insurance, Allianz Life, Workday, Pandora, Cisco, Chanel and Qantas, all reporting breaches linked to Salesforce-connected applications.

Now, credit reporting firm TransUnion has confirmed its own major incident, with more than 4.4 million U.S. consumers affected. Attackers exploited weaknesses in third-party integrations, not Salesforce itself. Security researchers tie this technique to the extortion group ShinyHunters and its affiliated crews.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM/NEWSLETTER.

SCAMMERS ARE USING DOCUSIGN EMAILS TO PUSH APPLE PAY FRAUD

TransUnion has disclosed a major data breach that impacted 4,461,511 individuals in the United States, according to a filing with the Maine Attorney General’s Office. The incident occurred on July 28, 2025, and was discovered two days later on July 30.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations. The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U.S. consumer support operations.

The breach resulted from unauthorized access to a third-party application used in TransUnion’s U.S. consumer support operations. U..S. consumer support operations.

Now, the company has launched a campaign to encourage users to change their passwords. The new password must be at least 8 characters, have at least one lowercase letter, one uppercase letter, one numeral, and one symbol from !@#$%^&*()_+{}|: