Broker profile
One of the three nationwide credit bureaus, and the widest data-broker cluster in California's registry, with eleven registered entities giving transunion.com as their website. Beyond credit reports it sells investigative searches through TLOxp, which TransUnion says covers 95% of the US population, and marketing audiences through TruAudience and Neustar. A 2025 breach reached about 4.46 million people. One privacy request covers TLOxp and the marketing lines, but it can't delete your credit report, and a freeze is separate.
TransUnion overview
Each broker is scored 1 to 4 across the six dimensions above; higher means more exposure, and the overall gauge is their average.
A confirmed prior data leak holds the overall rating at Substantial or higher; a major or repeat breach forces Extensive, regardless of the other five dimensions.
Credit bureau with investigative and marketing-data lines
TransUnion (NYSE: TRU) · Chicago, IL
1968
Eleven entities on transunion.com, plus Commerce Signals on its own site
TLOxp · TruAudience · Neustar · TruValidate
Credit reports are · TLOxp and the marketing lines aren't
Up to 45 days, sometimes 90, by TransUnion's own page
4,461,511 people, per its Maine filing
Background
TransUnion was founded in 1968 to provide regional credit reporting, and its credit file is the FCRA-regulated part most people know. Much of what it sells now isn't a credit report at all, and doesn't come with the FCRA's dispute rights.
TLOxp, now sold under the TruLookup name, is TransUnion's investigative search. TransUnion markets it to law enforcement, collectors and investigators, and says it draws on 10,000 public and proprietary sources covering 95% of the US population. The company behind it, TransUnion Risk and Alternative Data Solutions, states that a TLOxp report isn't a consumer report under the FCRA.
TruAudience and Neustar, which TransUnion bought in December 2021 for $3.1 billion, sell marketing identity data and audience segments. Neustar's own privacy notice lists political and health-related audiences among them. TruValidate and iovation sell device and identity signals for fraud checks.
The 2025 breach. In July 2025, attackers posing as help-desk staff talked their way into the Salesforce system TransUnion uses for US consumer support. TransUnion told the Maine Attorney General that 4,461,511 people were affected, and its letters said the data didn't include credit reports or core credit information. It follows a 2022 breach at TransUnion South Africa that reached about 5 million consumers and a 2019 incident in Canada that put data on about 37,000 people at risk.
Data Published
Nobody can look you up on a TransUnion search page. The data surfaces instead as a pre-approved offer, an ad, a background or tenant check, or a fraud score you never see.
Credit reports and scores from Trans Union LLC, under the FCRA
Prescreened lists for pre-approved credit and insurance offers
TLOxp investigative reports, sold outside the FCRA to law enforcement, collectors and investigators
Marketing audiences through TruAudience, which its 2025 annual report says offers more than 130,000 segments, and through Neustar
Device and identity risk signals through TruValidate and iovation
Tenant screening reports through TransUnion Rental Screening Solutions
Contact
TransUnion 555 West Adams Street Chicago, IL 60661
TransUnion Data Privacy, P.O. Box 130, Woodlyn, PA 19094 · privacy@transunion.com
Online · (800) 916-8800 · TransUnion, P.O. Box 160, Woodlyn, PA 19094
Eleven entities give www.transunion.com as their website, and TransUnion's 2025 10-K lists every one as a subsidiary. Their shared deletion figures are one company-wide count, filed four times, not four separate ones.
Network
Equifax and Experian keep their own files, so a freeze or a privacy request has to be made at each. Prescreen opt-outs and new fraud alerts are the exceptions, because TransUnion passes those on to the other bureaus.
Doing all three? Our credit freeze walkthrough has each bureau's link, phone line and postal address, and the OptOutPrescreen guide covers the one request that reaches every bureau at once.
Reputation
Every signal points the same way. The CFPB's database holds more complaints about TransUnion than about any other company, and the BBB currently gives it no rating at all, saying it's reviewing the complaints.
Litigation
Regulators have gone after TransUnion over how accurate its reports are and how it sells to consumers, and the 2025 breach is now its own set of cases.
MDL No. 3170 · N.D. Illinois · consolidated December 2025
July 2025 · 4,461,511 people
54, in five federal districts
The Judicial Panel on Multidistrict Litigation sent the lawsuits over the 2025 breach to the Northern District of Illinois on December 16, 2025. The panel's order describes a social-engineering attack on TransUnion's own Salesforce environment, not a flaw in Salesforce itself.
D. Colo. 1:23-cv-2659 · settled October 2023 · tenant screening accuracy
$11 million
$4 million
The FTC and CFPB charged that TransUnion's tenant screening business reported one eviction case as several, misreported how cases ended, labelled a landlord's claim as a court judgment and let sealed eviction records into its reports. They also said it often didn't tell renters which vendors had supplied the records, which made errors harder to fix.
CFPB 2017-CFPB-0002 · N.D. Ill. 1:22-cv-01880
$13.9M restitution · $3M in fines
Dismissed with prejudice, Feb 28, 2025
The 2017 order found TransUnion had deceived consumers about how useful the credit scores it sold were and what they really cost. In April 2022 the CFPB sued TransUnion over its compliance with that order, and on February 28, 2025 the suit was dismissed with prejudice by agreement.
US Supreme Court · No. 20-297 · FCRA accuracy class action
8,185 people with terrorist-watchlist alerts in their files
Only the 1,853 whose reports went out had standing
TransUnion's OFAC Name Screen alert marked people as a potential match to the Treasury's list of terrorists, drug traffickers and other serious criminals when only their first and last names matched. A jury awarded more than $60 million, and the Supreme Court reversed, holding that only class members whose reports had gone to a third party could sue.
FAQ
Yes, well beyond the credit report. Eleven TransUnion entities file as data brokers in California, selling investigative searches through TLOxp, marketing audiences through TruAudience and Neustar, and fraud signals through TruValidate.
Use its US privacy rights page or one-time opt-out form, or call (866) 310-8783. One request covers Trans Union LLC, TransUnion Interactive, TransUnion Rental Screening Solutions, TLOxp's company and the marketing business. TransUnion says opt-outs are generally processed daily and deletions take up to 45 days, sometimes 90.
Partly. TransUnion routes the company behind TLOxp through the same opt-out and deletion process, but its privacy page excludes publicly available data and data held under the GLBA and the Driver's Privacy Protection Act. Outside states with a privacy law, it says it may not act on a request beyond what your state requires.
No, and TransUnion's privacy page says so outright. You can dispute errors in it, freeze it for free, and stop prescreened offers at OptOutPrescreen.com.
Yes. The July 2025 breach of a Salesforce system it uses for consumer support affected 4,461,511 people, by its own Maine filing. TransUnion South Africa had a breach in 2022, and TransUnion Canada an incident in 2019.
Redact scans 120+ data broker sites from your device, finds where your details are listed, and submits the removal requests for you. If a broker relists you, it files again.
September 10, 2026 · Rechecked against TransUnion's privacy notices, freeze and prescreen pages, its 2025 10-K and its breach filing with the Maine Attorney General, the FTC and CFPB case pages, and the California data-broker registry CSV (downloaded and read directly), with Trustpilot, the BBB, SmartCustomer and the CFPB complaint database read in a browser the same day. No request has been put through these channels.
