DataBreachInformation.com
MonitoringIndiana AG filing · September 25, 2026

TIAA Reports Data Breach to Indiana Regulators in 2026

TIAA, a financial services organization, filed a data breach notification with Indiana authorities on September 25, 2026. The incident, which occurred around August 31, 2026, potentially exposed sensitive personal and financial information. The company is currently monitoring the situation as part of its ongoing investigation.

State
Indiana
Breach date
August 31, 2026
Reported
September 25, 2026

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Financial Account Number
  • Routing Number
  • Policy Number
  • Credit Score Information
  • Transaction History

TIAA, an organization providing financial services, officially reported a data breach to Indiana regulatory bodies on September 25, 2026. This notification confirms a security incident that took place on or about August 31, 2026, as recorded in public filings.

The breach filing indicates that the exposed data categories include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Policy Number, Credit Score Information, and Transaction History. These types of information are often targeted in attempts to commit identity theft and financial fraud.

Exposure of such sensitive personal and financial details carries considerable risks for affected individuals. It could lead to unauthorized access to accounts, fraudulent transactions, or attempts at identity theft. Individuals should be proactive in monitoring their financial and personal records.

Those who receive a formal data breach notification are generally advised to review their financial statements and credit reports regularly for any suspicious or unauthorized activity. Placing a fraud alert or security freeze on credit files can also provide an additional layer of protection against misuse of personal information.

According to the official records, the investigation into the TIAA data breach remains in a monitoring status. This suggests that the company is actively overseeing the situation and its implications.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases