2022 TransUnion South Africa — 54M (stolen credentials)
Data compromised
Customer records
Technical writeup
N4ughtysecTU breached TransUnion South Africa using stolen credentials (password 'password'). 54M customer records; ransom demanded. South African subsidiary.
Root cause
Stolen credentials; weak password on server.