Capitol News

Michigan Attorney General Dana Nessel has reissued a consumer alert on data breaches after a cyber incident at TransUnion exposed personal information of more than 4.4 million people in July. The breach occurred through unauthorized access via a third-party application and included names, Social Security numbers, and dates of birth. TransUnion stated that no credit information was accessed during the incident.

TransUnion is contacting those affected by mail and offering 24 months of free credit monitoring and fraud assistance services. Michigan does not require companies to notify the Attorney General’s office about data breaches, unlike most other states. As a result, it is unclear how many Michigan residents were impacted.

Attorney General Nessel has advocated for changes to state law that would require immediate notification to her office when companies experience data breaches. Senate Bills 360-364, which are designed to improve protections against data breaches and identity theft, have passed the Michigan Senate and are awaiting action in the House of Representatives.

“Michigan constantly rates among the top 20 states for identity theft reports, and data breaches like these only increase the risks for consumers,” Nessel said. “This is why I have long supported stronger data breach notification laws that would give us greater ability to track breaches, hold companies accountable, and better protect Michigan consumers. I urge residents to be vigilant and take advantage of the resources available to help safeguard their personal information.”

Nessel’s office recommends several steps for consumers following a data breach: watching out for phishing emails, changing passwords, removing unnecessary files or data, using multifactor authentication on devices and accounts, and regularly reviewing credit reports. Free weekly credit reports from Equifax, Experian, and TransUnion are available through the Annual Credit Report website.

Consumers are also advised to consider freezing their credit if Social Security numbers have been compromised. A credit freeze blocks creditors from accessing an individual’s credit report without permission—making it harder for identity thieves to open new accounts in someone else’s name. Credit freezes can be placed or lifted at no cost with each major bureau: Equifax, Experian, and TransUnion.

To support victims of identity theft, Attorney General Nessel launched the Michigan Identity Theft Support System (MITS), which helps residents restore stolen identities. Steps include reviewing warning signs of identity theft, identifying what information may have been compromised, contacting financial institutions, checking credit reports with possible freezes as needed, filing FTC or police reports if necessary—and seeking further assistance through MITS if required.

Residents who need more help can contact the Consumer Protection Team by phone or file an online complaint form.