PHP Vulnerability Responses by Company

TransUnion LLC

Companies / web services
Aliases / services
TransUnion / トランスユニオン / TransUnion LLC
Official website
https://www.transunion.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

TransUnion US consumer support third-party application

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

An August 2025 notice describes unauthorized access to limited personal information in a third-party US consumer support application. Credit reports and core credit information were not accessed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review statements and credit reports and consider a fraud alert or credit freeze. The historical monitoring offer required enrollment within 90 days of the notice; that period has ended.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/ecrime/databreach/reports/sb24-607772Service and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/U.S.%20Adult%20Consumer%20Letter.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies TransUnion LLC and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments