TIAA data breach

Clerk's notes

TIAA, a prominent financial services organization and retirement plan provider, reported a data breach to the Maryland Attorney General on March 12, 2025. This formal filing signals that sensitive client information may have been compromised through unauthorized access to their systems. The investigation into the full scope and impact of this cybersecurity incident remains in a monitoring status.

The types of personal and financial information reported as exposed include individuals' Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Retirement Plan Details, Tax Identification Information, and Mailing Address. The compromise of such a comprehensive array of identifiers creates a significant risk for those affected by the breach.

For individuals who have received an official data breach notification letter from TIAA, this means your private financial and personal details are now at heightened risk. The exposure of Social Security Numbers and Financial Account Numbers can lead to various forms of identity theft, financial account takeovers, or fraudulent tax filings. It is a serious concern that requires careful attention from affected account holders.

Financial institutions like TIAA are legally required to implement robust administrative, technical, and physical safeguards to protect sensitive consumer data under federal and state statutes. The occurrence of a widespread data breach strongly suggests that these security measures may have been insufficient to prevent unauthorized access. This incident raises questions about the protections in place for the critical client information entrusted to TIAA.

If you have received a data breach notification from TIAA, it is crucial to remain vigilant for any unusual activity on your financial accounts and credit reports. Understanding your legal options can provide a path to address potential harm and hold the responsible parties accountable for failures in data protection. We offer a free case review to help you assess your specific situation.

If a notification letter about this breach reached you, see every Maryland data breach on file or browse all cases.