Attorney General Nessel Reissues Consumer Alert on Data Breaches Following TransUnion Cyber Incident

LANSING – Michigan Attorney General Dana Nessel is reissuing her consumer alert on data breaches following a recently revealed cyber incident at TransUnion that impacted more than 4.4 million people in July. The breach, which involved unauthorized access through a third-party application, compromised personal data, including names, Social Security numbers, and dates of birth. According to TransUnion, no credit information was accessed.

TransUnion is notifying impacted individuals by mail. Affected consumers will receive 24 months of free credit monitoring services that provide alerts regarding changes to their credit file, along with proactive fraud assistance. Unlike Michigan, most states have laws requiring that notice of a data breach also be provided to the Department of Attorney General, which includes information about the breach and the number of residents affected. Because Michigan does not have a notice requirement, the number of impacted Michigan consumers remains unknown.

Attorney General Nessel has repeatedly advocated for strengthening Michigan law to require companies that experience a data breach to immediately inform her office. This would allow the Department of Attorney General to more quickly alert the public. Senate Bills 360-364, which aim to enhance protections against data breaches and identity theft, passed the Michigan Senate earlier this year and await consideration before the Michigan House of Representatives.

“Michigan constantly rates among the top 20 states for identity theft reports, and data breaches like these only increase the risks for consumers,” Nessel said. “This is why I have long supported stronger data breach notification laws that would give us greater ability to track breaches, hold companies accountable, and better protect Michigan consumers. I urge residents to be vigilant and take advantage of the resources available to help safeguard their personal information.”

Consumers can protect themselves during a data breach by taking the following actions: 

• Watch out for phishing emails;
• Strengthen or change passwords;
• Do not retain unnecessary data or files;
• Use multifactor authentication on devices and accounts; and
• Review their credit report often. Take advantage of free weekly credit reports from each of the three main credit reporting agencies (Equifax, Experian, and TransUnion) by contacting the Annual Credit Report website.

Consumers are also encouraged to consider taking action to put a freeze on their credit. This is especially important where Social Security numbers are accessed in a data breach, which is all too common. A credit freeze prevents creditors—such as banks or lenders—from accessing an individual’s credit reports. This will stop identity thieves from taking out new loans or credit cards in the consumer’s name because creditors will not approve their loans or credit requests if they cannot first access the consumer's credit reports. By law, a credit bureau must allow consumers to place, temporarily lift, or remove a credit freeze for free. Individuals will need to freeze their credit with each bureau: Equifax, Experian, and TransUnion.

To assist residents, Attorney General Nessel launched the Michigan Identity Theft Support System (MITS), which helps residents seeking to restore their stolen identities. When they believe their identity or personal information is in the hands of a fraudster, consumers should:

• Review identity theft warning signs to determine if they may be a victim of identity theft.
• Determine which personal information may have been compromised.
• Contact their financial institution (e.g., bank, credit union, etc.).
• Check their credit report and put a freeze on their credit, if necessary.
• File a Federal Trade Commission (FTC) Identity Theft Report or police report.
• If Michigan residents have completed the steps above and still need assistance, they can complete the MITS Request for Identity Theft Assistance form.

To file a complaint with the Attorney General, or get additional information, contact:

Consumer Protection Team
P.O. Box 30213
Lansing, MI 48909
517-335-7599
Fax: 517-241-3771
Toll-free: 877-765-8388
Online complaint form

###