TIAA data breach
TIAA appears in 8 breach notices filed with Indiana AG, Maryland AG, California AG and Montana DOJ, most recently reported on September 25, 2026.
Also listed as: TIAA, FSB aka TIAA Bank; TIAA, FSB
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| Sep 25, 2026 | Indiana AG | Aug 31, 2026 | 4 Indiana residents | Not listed | Indiana AG list ↗ |
| Mar 12, 2025 | Maryland AG | Not listed | 1 Maryland residents | NameFinancial account information | Notice ↗ |
| Sep 6, 2024 | California AG | Oct 29, 2023 | Not listed | Not listed | California AG list ↗ |
| Jan 29, 2024 | Maryland AG | Not listed | 1 Maryland residents | Not listed | Notice ↗ |
| Feb 21, 2023 | Montana DOJ | Feb 16, 2023 | 10 Montana residents | Not listed | Notice ↗ |
| Feb 16, 2023 | Maryland AG | Not listed | 59 Maryland residents | NameSocial Security numberDate of birthFinancial account informationPayment card informationEmail addressAddressPhone number | Notice ↗ |
| Jan 25, 2023 | Maryland AG | Not listed | 1 Maryland residents | Not listed | Notice ↗ |
| Apr 17, 2018 | Montana DOJ | Mar 16, 2018 | 1 Montana residents | Not listed | Notice ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for TIAA right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.