TIAA data breach

Clerk's notes

On September 25, 2026, TIAA officially reported a data security incident to authorities in Indiana. The breach type remains unspecified, but the case is currently under monitoring, indicating ongoing review of its scope and impact. This notification signals that personal information entrusted to TIAA may have been compromised.

The reported exposed data categories are highly sensitive and include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Policy Number, Credit Score Information, and Transaction History. The exposure of such comprehensive financial and personal identifiers presents significant long-term risks for affected individuals.

When core identity and financial details like Social Security Numbers and account information are compromised, individuals face elevated and prolonged risks of identity theft, financial fraud, and targeted cybercrime. Bad actors can use this data for unauthorized transactions, to open fraudulent credit lines, or to facilitate sophisticated phishing attacks targeting retirement savings.

As a financial services entity, TIAA is subject to stringent regulatory frameworks, including the Gramm-Leach-Bliley Act (GLBA) and applicable Indiana data protection laws. These regulations mandate robust security measures to protect non-public personal information. A breach of this nature raises questions regarding the adequacy of the safeguards in place to prevent unauthorized disclosure.

Receiving an official data breach notification letter from TIAA means your private financial and personal records were accessed without authorization while under their custody. This notification often establishes the legal standing required to pursue claims. If you have received such a letter, it is advisable to consider your options to protect your interests and understand if you may be entitled to compensation. We are prepared to review these claims on a contingency fee basis; you would incur no out-of-pocket costs unless we successfully recover on your behalf.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.