The TIAA Data Breach: Reported Filing Facts
TIAA is a prominent financial services organization that provides retirement planning, investment management, and insurance products to individuals and institutional clients. As a financial institution, the company maintains highly sensitive personal and financial records, including Social Security numbers, retirement account details, and tax-related documentation. In 2025, TIAA officially reported a data security incident to the Maryland Attorney General, confirming that unauthorized parties may have accessed the personal information of certain customers. If you received a data breach notification letter from TIAA, it indicates that your specific information was involved in this incident. This notice is intended to inform you of the event, the types of data potentially compromised, and the steps the company is taking to address the security breach.
- State
- Maryland
- Reported
- March 12, 2025
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Related data breach cases
- St. Joseph College of Maine
- Tokyo Electron U.S. Holdings, Inc.
- Kinsey's Archery Products, Inc.; VUC, Inc.
- VUC, Inc.
- Open Door Capital, LLC
- Clarke Nicolini & Associates, Ltd.
- Crown Health Care Laundry Services
- OrthoMinds, LLC
- CSG Consultants
- Miedema Produce, Inc.
- Forum Communications Company
- CareFirst BlueCross Blue Shield
- Strauss Brands LLC
- Uni-Select