The credit bureau has said the July breach was brought on by an unidentified third party and was quickly contained.
The credit reporting company TransUnion has confirmed that more than 4 million people’s data was exposed in a recent hack involving an unidentified third party.
In a letter posted to the website of Maine’s attorney general on Wednesday, the company said it had “recently experienced a cyber incident involving a third-party application serving our US consumer support operations”.
“We continue to enhance our security controls as appropriate to minimise the risk of any similar incident in the future.”
In a statement, TransUnion said it had “quickly contained the issue, which did not involve our core credit database or include credit reports”.
