TransUnion statement regarding some limited online activity alleging that data obtained from multiple entities, including TransUnion, will be released.

TransUnion is aware of some limited online activity alleging that data obtained from multiple entities, including TransUnion, will be released. Immediately upon discovering these assertions, we partnered with outside cybersecurity and forensic experts to launch a thorough investigation. At this time, we and our internal and external experts have found no indication that TransUnion systems have been breached or that data has been exfiltrated from our environment.

Through our investigation, we have found that multiple aspects of the messages – including the data, formatting, and fields – do not match the data content or formats at TransUnion, indicating that any such data came from a third party.

Data protection is top priority at TransUnion. We take seriously any assertions regarding our information security and will continue to closely monitor this situation.

^{For additional information relating to TransUnion’s ability to maintain the security and integrity of our data, and other related matters, please see the Risk Factors included in TransUnion’s Annual Report on Form 10-K for the year ended December 31, 2022, and any subsequent Quarterly Report on Form 10-Q or Current Report on Form 8-K, which are filed with the Securities and Exchange Commission and are available on TransUnion’s website (www.transunion.com/tru) and on the Securities and Exchange Commission’s website (www.sec.gov).}