Hackers used compromised user credentials to access 37,000 TransUnion customer’s personal information. The breach raises concern to the company’s current cyber security posture as the breach occurred roughly between June-July 2019 but was not detected by the company until August. TransUnion’s brand reputation and public image is sure to take a hit as customers may or may not be affected by their lack of ability to safeguard their client’s information.
TransUnion has not released any specific details on the type of data that was involved which leads many to suspect that personally identifiable information was included. The company did note that credit report data was included which means names, birth dates, addresses, social insurance numbers and other highly sensitive data are at stake.
Personal credentials with such sensitive data can fetch higher profits on the dark web making this kind of breach very attractive to cyber criminals. Organizations should be looking toward providing more advanced security measures to safeguard such data.