TIAA Reports Data Breach to Indiana Regulators in 2026
TIAA, a financial services organization, filed a data breach notification with Indiana authorities on September 25, 2026. The incident, which occurred around August 31, 2026, potentially exposed sensitive personal and financial information. The company is currently monitoring the situation as part of its ongoing investigation.
- State
- Indiana
- Breach date
- August 31, 2026
- Reported
- September 25, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Financial Account Number
- Routing Number
- Policy Number
- Credit Score Information
- Transaction History
TIAA, an organization providing financial services, officially reported a data breach to Indiana regulatory bodies on September 25, 2026. This notification confirms a security incident that took place on or about August 31, 2026, as recorded in public filings.
The breach filing indicates that the exposed data categories include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Policy Number, Credit Score Information, and Transaction History. These types of information are often targeted in attempts to commit identity theft and financial fraud.
Exposure of such sensitive personal and financial details carries considerable risks for affected individuals. It could lead to unauthorized access to accounts, fraudulent transactions, or attempts at identity theft. Individuals should be proactive in monitoring their financial and personal records.
Those who receive a formal data breach notification are generally advised to review their financial statements and credit reports regularly for any suspicious or unauthorized activity. Placing a fraud alert or security freeze on credit files can also provide an additional layer of protection against misuse of personal information.
According to the official records, the investigation into the TIAA data breach remains in a monitoring status. This suggests that the company is actively overseeing the situation and its implications.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Bozeman School District
- Bozeman School DistrictIN
- Teamsters Local 17
- Teamsters Local 17IN
- Bank
- BankIN
- PeoplesBank
- World Acceptance Corporation
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners