Criterica Intelligence — production models trained on real court records, not synthetic data
Data Breach — MDL No. 3170

Trans Union, LLC

U.S. District Court for the Northern District of Illinois

The Trans Union, LLC, Customer Data Security Breach litigation was centralized before Judge Robert W. Gettleman in the Northern District of Illinois in December 2025, consolidating claims arising from a data security breach at Trans Union, one of the three major national consumer credit-reporting agencies, alleging unauthorized access to sensitive consumer credit and personal information. With 63 pending actions shortly after centralization, this docket has formed with substantial initial scale, consistent with the very large population of consumers whose data a national credit bureau holds.

Credit-bureau breach litigation is a mature subcategory within the data-breach MDL landscape, given prior large-scale breach litigation involving other major credit-reporting agencies, which has developed an extensive body of precedent on Article III standing for data-exposure harm, damages methodology tied to identity-theft and fraud risk, and typical settlement-fund structures for large consumer classes. This docket can draw on that established framework even as it develops its own specific factual record regarding the scope and cause of the Trans Union breach.

Because credit-reporting data — Social Security numbers, financial histories, and other identity-critical information — is among the most sensitive categories of personal data, breaches at major bureaus have historically generated some of the largest and most closely watched data-breach settlements, and this docket is likely to be evaluated against that established benchmark as it develops. Criterica Intelligence's platform tracks this credit-bureau breach subcategory specifically, given its comparatively mature legal framework relative to newer categories of data-breach litigation, providing calibrated context for how this docket is likely to progress. A companion capital brief on this docket is available through Criterica Capital.

Frequently Asked Questions
What happened in the Trans Union breach?

A data security breach at Trans Union, a major national consumer credit-reporting agency, allegedly resulted in unauthorized access to sensitive consumer credit and personal information.

Why is credit-bureau breach litigation considered a mature subcategory?

Prior large-scale breach litigation involving other major credit-reporting agencies has developed extensive precedent on standing, damages methodology, and settlement-fund structures for large consumer classes.

Why does the sensitivity of credit-bureau data matter for this docket?

Because credit-reporting data is among the most sensitive categories of personal information, breaches at major bureaus have historically generated some of the largest and most closely watched data-breach settlements.

How does Criterica Intelligence assess this docket?

By tracking the credit-bureau breach subcategory specifically, given its comparatively mature legal framework, to provide calibrated context for how this docket is likely to progress relative to newer categories of data-breach litigation.

Statistics shown reflect historical or illustrative model outputs derived from real case data. They are not predictions or guarantees of any individual outcome. Litigation results depend on facts, jurisdiction, judge, and counsel, and vary case by case. Model accuracy is subject to selection effects and changing legal dynamics.

← All Pending MDLsFunding brief on Criterica Capital →