TIAA Reports Data Breach Affecting Records Filed in Indiana
TIAA filed a data breach report in Indiana on September 25, 2026, disclosing that personal records including Social Security Numbers and financial account details were exposed. This incident, which occurred on August 31, 2026, is currently under monitoring and necessitates vigilance from affected individuals.
- State
- Indiana
- Breach date
- August 31, 2026
- Reported
- September 25, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Financial Account Number
- Routing Number
- Policy Number
- Credit Score Information
- Transaction History
TIAA reported a data security incident to Indiana regulators on September 25, 2026. The breach, which occurred on August 31, 2026, is currently under monitoring as authorities and the company continue their assessment of the event.
According to the official filing, the compromised information includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Policy Number, Credit Score Information, and Transaction History.
Exposure of such sensitive financial and personal identifiers can lead to various forms of identity theft and financial fraud. Individuals whose data was involved face potential risks such as unauthorized account access, fraudulent transactions, or attempts to open new credit lines in their name.
To mitigate potential risks, affected individuals should consider placing a fraud alert or security freeze on their credit reports with all three major credit bureaus. Regularly reviewing bank statements, credit card activity, and other financial records for unusual or unauthorized transactions is also crucial.
It is advisable to remain vigilant for unsolicited communications requesting personal information and to only provide sensitive data through verified, secure channels. For specific guidance, individuals should consult official resources or contact TIAA directly regarding the breach.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Teamsters Local 17
- Bank
- 9World Acceptance Corporation
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners
- The Association of the Bar of the City of New York
- Poppins Payroll Company
- Baltimore Medical System Inc
- Chicago Psychoanalytic Institute
- 7The Association of the Bar of the City of New York