Report a Vulnerability

Responsible Disclosure Policy

TransUnion welcomes reports from security researchers who discover vulnerabilities in our systems. We are committed to working with the security community to identify and address vulnerabilities promptly.

How to Report

Please send vulnerability reports to:

security@transunion.com

What to Include

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested remediation (if any)
• Your contact information for follow-up

Scope

This policy applies to all publicly accessible TransUnion domains and services. Before conducting any security research, please ensure you are complying with all applicable laws.

Safe Harbor

TransUnion will not pursue legal action against researchers who discover and report vulnerabilities in accordance with this policy, provided they act in good faith and comply with all applicable laws.