Biggest changeThis could increase the risks associated with our substantial indebtedness. • We may not be able to generate sufficient cash to service all of our indebtedness and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful. • Our inability to generate sufficient cash flow to satisfy our debt obligations, or to refinance our indebtedness on commercially reasonable terms or at all, would materially and adversely affect our financial position and results of operations and our ability to satisfy our obligations. • Our stock price has recently been volatile, and may continue to be volatile and/or decline, regardless of our operating performance, and you may not be able to resell shares of our common stock at or above the price you paid or at all. • Our business and operations are exposed to risks arising from developments and trends associated with climate change and other environmental and social matters, including risks associated with our own reporting or other initiatives. • Anti-takeover provisions in our organizational documents might discourage, delay or prevent acquisition attempts for us that you might consider favorable. • Our ability to pay cash dividends may be limited by the terms of our secured credit facility. • There can be no assurance that we will repurchase shares pursuant to our share repurchase program consistent with historical amounts or at all. • Economic and other conditions may adversely impact the valuation of our assets resulting in impairment charges that could have a material adverse impact on our results from operations. • Our efforts to execute any element of our business strategy, including our transformation plan to optimize our operating model and invest in our technology, could experience difficulties, delays, or unexpected costs and may not achieve anticipated benefits and savings. • If we fail to implement and maintain proper and effective internal controls over financial reporting, our ability to produce accurate financial statements on a timely basis could be impaired, which could cause investors to lose confidence in our reported financial information and have a negative effect on our stock price. • Pandemics, epidemics, disease outbreaks and other public health crises, such as the COVID-19 pandemic, have disrupted our business and operations, and future public health crises could materially adversely impact our business, financial condition, liquidity and results of operations. • We may not be able to attract and retain the skilled employees that we need to support our business. • We are subject to losses from risks for which we do not insure. • If we experience changes in tax laws or adverse outcomes resulting from examination of our tax returns, it could adversely affect our results of operations. 21 Risks Related to Our Business Our revenues are concentrated in the U.S. financial services and consumer credit industries.
Biggest changeThis could increase the risks associated with our substantial indebtedness. • We may not be able to generate sufficient cash to service all of our indebtedness and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful. • Our inability to generate sufficient cash flow to satisfy our debt obligations, or to refinance our indebtedness on commercially reasonable terms or at all, would materially and adversely affect our financial position and results of operations and our ability to satisfy our obligations. • Our stock price has recently been volatile, and may continue to be volatile and/or decline, regardless of our operating performance, and you may not be able to resell shares of our common stock at or above the price you paid or at all. • Our business and operations are exposed to risks arising from developments and trends associated with climate change and other sustainability matters, including risks associated with our own reporting or other initiatives. • Anti-takeover provisions in our organizational documents might discourage, delay or prevent acquisition attempts for us that you might consider favorable. • Our ability to pay cash dividends may be limited by the terms of our secured credit facility. • There can be no assurance that we will repurchase shares pursuant to our share repurchase program consistent with historical amounts or at all. • Economic and other conditions may adversely impact the valuation of our assets resulting in impairment charges that could have a material adverse impact on our results from operations. • If we fail to implement and maintain proper and effective internal controls over financial reporting, our ability to produce accurate financial statements on a timely basis could be impaired, which could cause investors to lose confidence in our reported financial information and have a negative effect on our stock price. • Natural disasters, pandemics, terrorist acts, war, actions by governments, and other geopolitical activities could disrupt our operations. • We may not be able to attract and retain the skilled employees that we need to support our business. • We are subject to losses from risks for which we do not insure. • If we experience changes in tax laws or adverse outcomes resulting from examination of our tax returns, it could adversely affect our results of operations.
This includes authority to issue regulations under federal consumer financial protection laws, such as under FCRA and other laws applicable to us and our financial customers. The CFPB is authorized to prevent “unfair, deceptive or abusive acts or practices” through its regulatory, supervisory and enforcement authority.
This includes authority to issue regulations under federal consumer financial protection laws, such as under the FCRA and other laws applicable to us and our financial customers. The CFPB is authorized to prevent “unfair, deceptive or abusive acts or practices” through its regulatory, supervisory and enforcement authority.
The CFPB conducts examinations and investigations, and may issue subpoenas and bring civil actions in federal court for violations of the federal consumer financial laws including FCRA.
The CFPB conducts examinations and investigations and may issue subpoenas and bring civil actions in federal court for violations of the federal consumer financial laws including the FCRA.
The NORA letter alleged that Trans Union LLC violated FCRA’s requirements to conduct a reasonable reinvestigation of disputed information and follow reasonable procedures to assure maximum possible accuracy of the information in consumer reports, and the Consumer Financial Protection Act’s prohibition of unfair, deceptive, and abusive acts or practices.
The NORA letter alleged that Trans Union LLC violated the FCRA’s requirements to conduct a reasonable reinvestigation of disputed information and follow reasonable procedures to assure maximum possible accuracy of the information in consumer reports, and the Consumer Financial Protection Act’s prohibition of unfair, deceptive, and abusive acts or practices.
For example, the CFPB recently issued guidance that indicates increased focus on consumer reporting agencies’ compliance with the accuracy and dispute obligations under FCRA with respect to rental information.
For example, the CFPB recently issued guidance that indicates increased focus on consumer reporting agencies’ compliance with the accuracy and dispute obligations under the FCRA with respect to rental information.
Acquisitions involve significant risks and uncertainties, including: • failing to achieve the financial and strategic goals for the acquired business; • paying more than fair market value for an acquired company or assets; 31 • failing to integrate the operations and personnel of the acquired businesses in an efficient and timely manner; • difficulties associated with the implementation and maintenance of internal controls required pursuant to the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley Act”), including over acquired businesses not previously subject to the requirements of the Sarbanes-Oxley Act; • disrupting our ongoing businesses, including loss of sales; • distracting management focus from our existing businesses; • assumption of unanticipated or contingent liabilities; • failing to retain key personnel; • incurring the expense of an impairment of assets due to the failure to realize expected benefits; • damaging relationships with employees, customers or strategic partners; • diluting the share value of existing stockholders; and • incurring additional debt or reducing available cash to service our existing debt.
Acquisitions involve significant risks and uncertainties, including: • failing to achieve the financial and strategic goals for the acquired business; • paying more than fair market value for an acquired company or assets; • failing to integrate the operations and personnel of the acquired businesses in an efficient and timely manner; • difficulties associated with the implementation and maintenance of internal controls required pursuant to the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley Act”), including over acquired businesses not previously subject to the requirements of the Sarbanes-Oxley Act; • disrupting our ongoing businesses, including loss of sales; • distracting management focus from our existing businesses; • assumption of unanticipated or contingent liabilities; • failing to retain key personnel; • incurring the expense of an impairment of assets due to the failure to realize expected benefits; • damaging relationships with employees, customers or strategic partners; • diluting the share value of existing stockholders; and • incurring additional debt or reducing available cash to service our existing debt.
The evolving regulatory landscape may impact our use of AI Technologies, require additional compliance measures and changes to our operations and processes, which could result in increased compliance costs and potential increases in civil claims against us, and could adversely affect our business, operations and financial condition. • Our ability to expand our operations in, and the portion of our revenue derived from, markets outside the United States is subject to economic, political and other inherent risks, which could adversely impact our growth rate and financial performance. • We face geopolitical and other risks associated with our international operations, which could materially adversely impact our results of operations and our financial condition. 20 • We may be unable to protect our intellectual property adequately or cost-effectively, which may cause us to lose market share or force us to reduce our prices.
The evolving regulatory landscape may impact our use of AI Technologies, require additional compliance measures and changes to our operations and processes, which could result in increased compliance costs and potential increases in civil claims against us, and could adversely affect our business, operations and financial condition. • Our ability to expand our operations in, and the portion of our revenue derived from, markets outside the United States is subject to economic, political and other inherent risks, which could adversely impact our growth rate and financial performance. • We face geopolitical and other risks associated with our international operations, which could materially adversely impact our results of operations and our financial condition. • We may be unable to protect our intellectual property adequately or cost-effectively, which may cause us to lose market share or force us to reduce our prices.
(collectively, the “TU Entities”) and the former President of our Consumer Interactive business, John Danaher, seeking restitution, civil money penalties, and injunctive relief, among other remedies, and alleging that the TU 26 Entities violated the 2017 Consent Order and engaged in deceptive acts and practices in marketing the TransUnion Credit Monitoring product, among other allegations.
(collectively, the “TU Entities”) and the former President of our Consumer Interactive business, John Danaher, seeking restitution, civil money penalties, and injunctive relief, among other remedies, and alleging that the TU Entities violated the 2017 Consent Order and engaged in deceptive acts and practices in marketing the TransUnion Credit Monitoring product, among other allegations.
However, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet completely 29 determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations.
However, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet completely determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations.
Furthermore, geopolitical dynamics caused by political, economic, social or other conditions in foreign countries and regions may impact our business and results of operations. Significantly higher and sustained rates of inflation, with subsequent 30 increases in operational costs, could have a material adverse effect on our business, financial position and results of operations.
Furthermore, geopolitical dynamics caused by political, economic, social or other conditions in foreign countries and regions may impact our business and results of operations. Significantly higher and sustained rates of inflation, with subsequent increases in operational costs, could have a material adverse effect on our business, financial position and results of operations.
The credit agreement governing Trans Union LLC’s senior secured credit facility restricts our ability to dispose of assets and use the proceeds from those dispositions and may also restrict our 33 ability to raise debt or equity capital to be used to repay other indebtedness when it becomes due.
The credit agreement governing Trans Union LLC’s senior secured credit facility restricts our ability to dispose of assets and use the proceeds from those dispositions and may also restrict our ability to raise debt or equity capital to be used to repay other indebtedness when it becomes due.
We could lose our access to data sources which could prevent us from providing our services. Our services and products depend extensively upon continued access to and receipt of data from external sources, including data received from customers, strategic partners and various government and public records repositories. In some cases, we 25 compete with our data providers.
We could lose our access to data sources which could prevent us from providing our services. Our services and products depend extensively upon continued access to and receipt of data from external sources, including data received from customers, strategic partners and various government and public records repositories. In some cases, we compete with our data providers.
In light of this guidance, our existing or potential financial services customers subject to OCC regulation may continue to revise their third-party risk management policies and processes and the terms on which they do business with us, which may adversely affect our relationship with such customers.
In light of this guidance, our existing or potential financial services customers subject to regulation may continue to revise their third-party risk management policies and processes and the terms on which they do business with us, which may adversely affect our relationship with such customers.
For example, in the United States, we are subject to federal and state laws that provide for more than 50 disparate notification regimes, some of which also provide for statutory damages and private rights of action for plaintiffs who experience certain types of data breaches.
For example, in the United States alone, we are subject to federal and state laws that provide for more than 50 disparate notification regimes, some of which also provide for statutory damages and private rights of action for plaintiffs who experience certain types of data breaches.
Additionally, given some of our equity interests in various companies, we may be limited in our ability to require or influence such companies to make 32 acquisitions or take other actions that we believe to be in our or their best interests. Our inability to take such actions could have a material impact on our revenues or earnings.
Additionally, given some of our equity interests in various companies, we may be limited in our ability to require or influence such companies to make acquisitions or take other actions that we believe to be in our or their best interests. Our inability to take such actions could have a material impact on our revenues or earnings.
In the recent past, our stock price has been volatile and had declined due to a number of factors, including the deteriorating macroeconomic environment, changing expectations about our future revenue and operating results, and softening of the forward-looking guidance we have provided.
In the recent past, our stock price has been volatile and has declined due to a number of factors, including the deteriorating macroeconomic environment, changing expectations about our future revenue and operating results, and softening of the forward-looking guidance we have provided.
In addition to the risks described in this section, several factors that could cause the price of our common stock to fluctuate significantly include, among others, the following, most of which we cannot control: • quarterly variations in our operating results compared to market expectations; • guidance that we provide to the public, any changes in this guidance or our failure to meet this guidance; • changes in preferences of our customers; • announcements of new products or significant price reductions by us or our competitors; • size of our public float; • stock price performance of our competitors; • publication of research reports about our industry; • changes in market valuations of our competitors; • fluctuations in stock market prices and volumes; • default on our indebtedness; • actions by our competitors; • changes in senior management or key personnel; • changes in financial estimates by securities analysts; • negative earnings or other announcements by us or other credit reporting agencies; • downgrades in our credit ratings or the credit ratings of our competitors; • issuances of capital stock or future sales of our common stock or other securities; • investor perceptions or the investment opportunity associated with our common stock relative to other investment alternatives; • the public response to press releases or other public announcements by us or third parties, including our filings with the SEC; • announcements relating to litigation; • the sustainability of an active trading market for our stock; 34 • changes in accounting principles; • global economic, legal and regulatory factors unrelated to our performance; and • other events or factors, including those resulting from natural disasters, war, acts of terrorism or responses to these events.
In addition to the risks described in this section, several factors that could cause the price of our common stock to fluctuate significantly include, among others, the following, most of which we cannot control: • quarterly variations in our operating results compared to market expectations; • guidance that we provide to the public, any changes in this guidance or our failure to meet this guidance; • changes in preferences of our customers; • announcements of new products or significant price reductions by us or our competitors; • size of our public float; • stock price performance of our competitors; • publication of research reports about our industry; • changes in market valuations of our competitors; 33 Table of Contents • fluctuations in stock market prices and volumes; • default on our indebtedness; • actions by our competitors; • changes in senior management or key personnel; • changes in financial estimates by securities analysts; • negative earnings or other announcements by us or other credit reporting agencies; • downgrades in our credit ratings or the credit ratings of our competitors; • issuances of capital stock or future sales of our common stock or other securities; • investor perceptions or the investment opportunity associated with our common stock relative to other investment alternatives; • the public response to press releases or other public announcements by us or third parties, including our filings with the SEC; • announcements relating to litigation; • the sustainability of an active trading market for our stock; • changes in accounting principles; • global economic, legal and regulatory factors unrelated to our performance; and • other events or factors, including those resulting from natural disasters, war, acts of terrorism or responses to these events.
As a global consumer credit reporting agency and provider of risk and information solutions, we collect, store and transmit a large amount of sensitive and confidential consumer information on over one billion consumers, including financial 23 information, personally identifiable information and protected health information.
As a global consumer credit reporting agency and provider of risk and information solutions, we collect, store and transmit a large amount of sensitive and confidential consumer information on over one billion consumers, including financial information, personally identifiable information and protected health information.
These factors include: • currency exchange rate fluctuations; • foreign exchange controls that might prevent us from repatriating cash to the United States; • difficulties in managing and staffing international offices; • increased travel, infrastructure, legal and compliance costs of multiple international locations; • foreign laws and regulatory requirements; • terrorist activity, natural disasters and other catastrophic events; • restrictions on the import and export of technologies; • difficulties in enforcing contracts and collecting accounts receivable; • longer payment cycles; • failure to meet quality standards for outsourced work; • unfavorable tax rules; • political and economic conditions in foreign countries, particularly in emerging markets; • the presence and acceptance of varying level of business corruption in international markets; • varying business practices in foreign countries; and • reduced protection for intellectual property rights.
These factors include: • currency exchange rate fluctuations; • foreign exchange controls that might prevent us from repatriating cash to the United States; • difficulties in managing and staffing international offices; • increased travel, infrastructure, legal and compliance costs of multiple international locations; • foreign laws and regulatory requirements; • terrorist activity, natural disasters and other catastrophic events; • restrictions on the import and export of technologies; • difficulties in enforcing contracts and collecting accounts receivable; • longer payment cycles; • failure to meet quality standards for outsourced work; • unfavorable tax rules; • political and economic conditions in foreign countries, particularly in emerging markets, and between countries; • foreign trade policies; • the presence and acceptance of varying level of business corruption in international markets; • varying business practices in foreign countries; and • reduced protection for intellectual property rights.
As with other companies, our approach to such matters evolves over time as well, and we cannot guarantee that our approach will align with the expectations or preferences of any particular stakeholder.
As with other companies, our approach to such matters evolves over time, and we cannot guarantee that our approach will align with the expectations or preferences of any particular stakeholder.
As a result, nineteen U.S. states have passed comprehensive privacy legislation intended to provide consumers with greater transparency and control over their personal information by providing consumers with certain rights, such as the right to know what personal information is being collected about them, and the right to access, delete, correct, or opt out of the sale of their personal information.
As a result, over a dozen U.S. states have passed comprehensive privacy legislation intended to provide consumers with greater transparency and control over their personal information by providing consumers with certain rights, such as the right to know what personal information is being collected about them, and the right to access, delete, correct, or opt out of the sale of their personal information.
The preventive actions we take to address cybersecurity risk, including protection of our systems and networks, cannot sufficiently account for all threats or repel or mitigate the effects of all cyberattacks in the future as it is not always be possible to anticipate, detect or recognize all threats to our systems, or to implement comprehensive preventive measures against all cybersecurity risks.
The preventive actions we take to address cybersecurity risk, including protection of our systems and networks, cannot sufficiently account for all threats or repel or mitigate the effects of all cyberattacks in the future as it is not possible to anticipate, detect or recognize all threats to our systems, or to implement comprehensive preventive measures against all cybersecurity risks.
Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies around the world have adopted consumer notification and other requirements in the event that consumer information is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible.
Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies around the world have adopted consumer notification, public disclosure and other requirements in the event that consumer information is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible.
See Part II, Item 8, “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 21, “Contingencies” for information regarding our legal proceedings. We currently use, and will continue to invest in the use of, AI Technologies, which use is subject to a continuously evolving regulatory landscape.
See Part II, Item 8, “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 20, “Contingencies” for information regarding our legal proceedings. We currently use, and will continue to invest in the use of, AI Technologies, which use is subject to a continuously evolving regulatory landscape.
Over the last several years, we have derived a growing portion of our revenues from customers outside the United States, and it is our intent to continue to expand our international operations, including our recently announced planned acquisition in Mexico. We have sales and technical support personnel in numerous countries worldwide.
Over the last several years, we have derived a growing portion of our revenues from customers outside the United States, and it is our intent to continue to expand our international operations, including our planned acquisition in Mexico. We have sales and technical support personnel in numerous countries worldwide.
See “Management’s Discussion and Analysis of Financial Condition and Results of Operations-Years Ended December 31, 2024, 2023 and 2022-Revenue-International Segment.” As we continue to expand our business, our success will partially depend on our ability to anticipate and effectively manage these and other risks.
See “Management’s Discussion and Analysis of Financial Condition and Results of Operations-Years Ended December 31, 2025, 2024 and 2023-Revenue-International Segment.” As we continue to expand our business, our success will partially depend on our ability to anticipate and effectively manage these and other risks.
We also rely on trade secrets and other forms of unpatented intellectual property that may be difficult to protect. • We may face claims for intellectual property infringement, which could subject us to monetary damages or limit us in using some of our technologies or providing certain services. • When we engage in acquisitions, investments in new businesses or divestitures of existing businesses, we face risks that may adversely affect our business. • We depend, in part, on strategic alliances, joint ventures and acquisitions to grow our business.
We also rely on trade secrets and other forms of unpatented intellectual property that may be difficult to protect. 20 Table of Contents • We may face claims for intellectual property infringement, which could subject us to monetary damages or limit us in using some of our technologies or providing certain services. • When we engage in acquisitions, investments in new businesses or divestitures of existing businesses, we face risks that may adversely affect our business. • We depend, in part, on strategic alliances, joint ventures and acquisitions to grow our business.
High inflation levels has a negative impact on our business by decreasing demand for credit due to slower consumer spending on non-essential goods and services and due to the Federal Reserve raising interest rates to combat inflation. Continued inflation and additional interest rate increases could further materially impact our business.
High inflation levels have a negative impact on our business by decreasing demand for credit due to slower consumer spending on non-essential goods and services and due to the Federal Reserve raising interest rates to combat inflation. Continued inflation and additional interest rate increases could further materially impact our business.
For example, in January 2017, as part of a Consent Order entered into with the CFPB, we agreed among other things, to implement certain practice changes in the way we advertise, market and sell products and services offered directly to consumers.
For example, in January 2017, as part of a Consent Order (“2017 Consent Order”) entered into with the CFPB, we agreed among other things, to implement certain practice changes in the way we advertise, market and sell products and services offered directly to consumers.
We also have the ability to request incremental loans on the same terms under the existing senior secured credit facility up to the greater of $1.0 billion and 100% of consolidated EBITDA and may incur additional incremental loans so long as the senior secured net leverage ratio does not exceed 4.25 to 1.0, subject to certain additional conditions and commitments by existing or new lenders to fund any additional borrowings.
We also have the ability to request incremental loans on the same terms under the existing senior secured credit facility up to the greater of $1.0 billion and 100% of consolidated EBITDA, as defined in the credit agreement, and may incur additional incremental loans so long as the senior secured net leverage ratio does not exceed 4.25 to 1.0, subject to certain additional conditions and commitments by existing or new lenders to fund any additional borrowings.
Our business and operations are exposed to risks arising from developments and trends associated with climate change and other environmental and social matters, including risks associated with our own reporting or other initiatives. There are inherent environmental, including climate-related, and social risks wherever business is co nducted.
Our business and operations are exposed to risks arising from developments and trends associated with climate change and other sustainability matters, including risks associated with our own reporting or other initiatives. There are inherent environmental, including climate-related risks, wherever business is co nducted.
While such an investigation is ongoing, we may not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, any or all of which could further increase the costs and consequences of a cybersecurity incident.
While such an investigation is ongoing, we may not necessarily know the extent of the 24 Table of Contents harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, any or all of which could further increase the costs and consequences of a cybersecurity incident.
Other states have also passed AI-focused legislation, such as Colorado’s Artificial Intelligence Act, which will require developers and deployers of “high-risk” AI systems to implement certain safeguards against algorithmic discrimination, and Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions.
Other states have also passed AI-focused legislation, such as Colorado’s Artificial Intelligence Act, which requires developers and deployers of “high-risk” AI systems to implement certain safeguards against algorithmic discrimination, and Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions.
The loss of one or more of our major customers or business partners could adversely affect our business, financial condition and results of operations. If we are unable to develop successful new services in a timely manner, or if the market does not adopt our new services, our ability to maintain or increase our revenue could be adversely affected.
The loss of one or more of our major customers or business partners could adversely affect our business, financial condition and results of operations. 22 Table of Contents If we are unable to develop successful new services in a timely manner, or if the market does not adopt our new services, our ability to maintain or increase our revenue could be adversely affected.
The markets for our services are highly competitive, and we may not be able to compete successfully against our competitors, which could impair our ability to sell our services. We compete on the basis of differentiated solutions, datasets, analytics capabilities, ease of integration with our customers’ technology, stability of services, customer relationships, innovation and price.
The markets for our services are highly competitive, and we may not be able to compete successfully against our competitors, which could impair our ability to sell our services. We compete on the basis of differentiated solutions, data assets, analytics capabilities, ease of integration with our customers’ technology, stability of services, customer relationships, innovation and price.
This is because, among other things: • the techniques used in cyberattacks change frequently and are increasingly sophisticated, including due to attackers’ increasing use of AI, and may not be recognized until after the attacks have succeeded; • cyberattacks can originate from a wide variety of sources, including sophisticated threat actors involved in organized crime, sponsored by nation-states, or linked to terrorist or hacktivist organizations; or • third parties may seek to gain access to our systems either directly or using equipment or security passwords belonging to employees, customers, third-party service providers or other users (such as through social engineering and phishing attacks).
This is because, among other things: • the techniques used in cyberattacks change frequently and are increasingly sophisticated, including due to attackers’ increasing use of AI, and may not be recognized until after the attacks have succeeded; • cyberattacks can originate from a wide variety of sources, including sophisticated threat actors involved in organized crime, sponsored by nation-states, or linked to terrorist or hacktivist organizations; or • third parties may seek to gain access to our systems either directly or using equipment or security passwords belonging to employees, customers, third-party service providers or other users (such as through social engineering and phishing attacks), similar to the tactics used in our cyber incident in July 2025.
If new indebtedness is added to our current debt levels, the related risks that we and our subsidiaries now face could intensify. We may not be able to generate sufficient cash to service all of our indebtedness and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful.
If new indebtedness is added to our current debt levels, the related risks that we and our subsidiaries now face could intensify. 32 Table of Contents We may not be able to generate sufficient cash to service all of our indebtedness and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful.
These laws and regulations, which generally are 27 designed to protect the privacy of the public and to prevent the misuse of personal information available in the marketplace, are complex, change frequently and have tended to become more stringent over time. We already incur significant expenses to ensure compliance with these laws.
These laws and regulations, which generally are designed to protect the privacy of the public and to prevent the misuse of personal information available in the marketplace, are complex, change frequently and have tended to become more stringent over time. We already incur significant expenses in implementing programs designed to ensure compliance with these laws.
Our compliance costs and legal and regulatory exposure could increase materially if we are targeted by the CFPB for additional enforcement actions, or if the CFPB or other federal, state or local regulators enact new regulations, change regulations that were previously adopted, modify through supervision or enforcement past regulatory guidance, or interpret existing regulations in a manner different or stricter than have been previously interpreted.
Our compliance costs and legal and regulatory exposure could increase materially if we are targeted by the CFPB for additional enforcement actions, or if the CFPB or other federal, state or local regulators enact new regulations, change regulations that 26 Table of Contents were previously adopted, modify through supervision or enforcement past regulatory guidance, or interpret existing regulations in a manner different or stricter than have been previously interpreted.
For instance, the Federal Housing Finance Agency and various government sponsored entities continue to evaluate permitting mortgage originators to underwrite loans using only two credit reports, rather than the current mandate to use a credit report from each of the three national consumer reporting agencies.
For instance, the Federal Housing Finance Agency and various government sponsored entities continue to evaluate permitting mortgage originators to underwrite loans using less than three credit reports, rather than the current mandate to use a credit report from each of the three national consumer reporting agencies.
These types of disruptions could lead to a decline in the volumes of services we provide our customers and could negatively impact our revenue and results of operations. We are subject to significant competition in the markets in which we operate, and we may face significant competition in the new markets that we plan to enter.
These types of disruptions could lead to a decline in the volumes of services we provide our customers and could negatively impact our revenue and results of operations. 21 Table of Contents We are subject to significant competition in the markets in which we operate, and we may face significant competition in the new markets that we plan to enter.
When these industries or the broader financial markets experience a downturn, demand for our services and revenues may be adversely affected. • We are subject to significant competition in the markets in which we operate, and we may face significant competition in the new markets that we plan to enter. • To the extent the availability of free or relatively inexpensive consumer information increases, the demand for some of our services may decrease. • Our relationships with key long-term customers may be materially diminished or terminated. • If we are unable to develop successful new services in a timely manner, or if the market does not adopt our new services, our ability to maintain or increase our revenue could be adversely affected. • If our outside service providers and key vendors are not able to or do not fulfill their service obligations, our operations could be disrupted and our operating results could be harmed. • There may be further consolidation in our end-customer markets, which may adversely affect our revenues. • Data security and integrity are critically important to our business, and cybersecurity incidents, including cyberattacks, breaches of security, unauthorized access to or disclosure of our intellectual property or confidential information, business disruption, or the perception that confidential information is not secure, could result in a material loss of business, regulatory enforcement, substantial legal liability and/or significant harm to our reputation. • We may be unable to adequately anticipate, prevent or mitigate damage resulting from increasingly sophisticated methods of illegal or fraudulent activities committed against us, which could harm our business, financial condition and results of operations and could significantly harm our reputation. • If we experience system failures, personnel disruptions or capacity constraints, or our customers do not modify their systems to accept new releases of our distribution programs, the delivery of our services to our customers could be delayed or interrupted, which could harm our business and reputation and result in the loss of revenues or customers. • We could lose our access to data sources which could prevent us from providing our services. • If we fail to maintain and improve our systems, our data matching technology, and our interfaces with data sources and customers, demand for our services could be adversely affected. • The CFPB has supervisory and examination authority over our business and may initiate enforcement actions with regard to our compliance with federal consumer financial laws.
When these industries or the broader financial markets experience a downturn, demand for our services and revenues may be adversely affected. • We are subject to significant competition in the markets in which we operate, and we may face significant competition in the new markets that we plan to enter. • To the extent the availability of free or relatively inexpensive consumer information increases, the demand for some of our services may decrease. • Our relationships with key long-term customers may be materially diminished or terminated. • If we are unable to develop successful new services in a timely manner, or if the market does not adopt our new services, our ability to maintain or increase our revenue could be adversely affected. • If our outside service providers and key vendors are not able to or do not fulfill their service obligations, our operations could be disrupted and our operating results could be harmed. • There may be further consolidation in our end-customer markets, which may adversely affect our revenues. • Data security and integrity are critically important to our business, and cybersecurity incidents, including cyberattacks, breaches of security, unauthorized access to or disclosure of our intellectual property or confidential information, business disruption, or the perception that confidential information is not secure, could result in a material loss of business, regulatory enforcement, substantial legal liability and/or significant harm to our reputation. • If we experience system failures, personnel disruptions or capacity constraints, or our customers do not modify their systems to accept new releases of our distribution programs, the delivery of our services to our customers could be delayed or interrupted, which could harm our business and reputation and result in the loss of revenues or customers. • We could lose our access to data sources which could prevent us from providing our services. • If we fail to maintain and improve our systems, our data matching technology, and our interfaces with data sources and customers, demand for our services could be adversely affected. • The CFPB has supervisory and examination authority over our business and may initiate enforcement actions with regard to our compliance with federal consumer financial laws.
If we fail to respond, or fail to cause our customers or data furnishers to respond, to changes in technology, regulatory requirements or customer preferences, the demand for our services, the delivery of our services or our market reputation could be adversely affected.
If 25 Table of Contents we fail to respond, or fail to cause our customers or data furnishers to respond, to changes in technology, regulatory requirements or customer preferences, the demand for our services, the delivery of our services or our market reputation could be adversely affected.
Many of the technical and complex statutes to which we are subject, including state and federal credit reporting, medical privacy and financial privacy requirements, may provide for civil and criminal penalties and may permit consumers to maintain individual or class action lawsuits against us and obtain statutorily prescribed damages.
Many of the technical and complex statutes to which we are subject, including state and federal credit reporting, medical privacy and financial privacy requirements, may provide for civil and criminal penalties and may permit consumers to maintain individual or class action lawsuits against us and obtain statutory and punitive damages.
Relationships with our alliance agreement partners may include risks due to incomplete information regarding the marketplace and commercial strategies of our partners, and our alliance agreements or other licensing agreements may be the subject of contractual disputes.
Relationships with our alliance agreement partners may include risks due to incomplete information regarding the marketplace and commercial strategies of our partners, and our alliance agreements or other licensing agreements 31 Table of Contents may be the subject of contractual disputes.
Our repurchase program does not obligate the Company to repurchase any specific dollar amount or to acquire any specific number of shares and the timing and amount of repurchases, if any, will depend on several factors, including market and business conditions, applicable debt covenants, the timing and amount of cash proceeds from asset dispositions, the timing and amount of any like-kind exchange transactions and other tax-planning matters, the trading price of our common stock, the nature of other investment opportunities, and other factors as our Board may deem relevant from time to time.
Our repurchase program does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares and the timing and amount of repurchases, if any, will depend on several factors, including market and business conditions, applicable debt covenants, the timing and amount of cash proceeds from asset dispositions, the timing and amount of any tax-planning matters, the trading price of our common stock, the nature of other investment opportunities, and other factors as our Board may deem relevant from time to time.
The EU AI Act applies to companies that develop, use and/or provide AI in the EU and—depending on the AI use case—includes requirements around transparency, conformity assessments and monitoring, risk assessments, human oversight, security, accuracy, general purpose AI and foundation models, and fines for breach.
The EU AI Act 28 Table of Contents applies to companies that develop, use and/or provide AI in the EU and—depending on the AI use case—includes requirements around transparency, conformity assessments and monitoring, risk assessments, human oversight, security, accuracy, general purpose AI and foundation models, and fines for breach.
Moreover, our compliance with privacy laws and regulations and our reputation depend in part on our customers’ adherence to privacy laws and regulations and their use of our services in ways consistent with consumer expectations and regulatory requirements.
Moreover, our compliance with privacy laws and regulations and our reputation depend in part on our customers’ adherence to privacy laws and regulations and their use of our services in ways consistent with consumer expectations and 27 Table of Contents regulatory requirements.
Our failure to manage these risks could adversely affect our business, financial condition and results of operations. We face geopolitical and other risks associated with our international operations, which could materially adversely impact our results of operations and our financial condition.
Our failure to manage these risks could adversely affect our business, financial condition and results of operations. 29 Table of Contents We face geopolitical and other risks associated with our international operations, which could materially adversely impact our results of operations and our financial condition.
We have entered into several alliance agreements or license agreements with respect to certain of our datasets and services and may enter into similar agreements in the future.
We have entered into several alliance agreements or license agreements with respect to certain of our data assets and services and may enter into similar agreements in the future.
We have long-standing relationships with a number of our customers, many of whom could unilaterally terminate their relationship with us or materially reduce the amount of business they conduct with us at any time. Our customer agreements relating to our core credit reporting service offered through our U.S.
Our relationships with key long-term customers may be materially diminished or terminated. We have long-standing relationships with a number of our customers, many of whom could unilaterally terminate their relationship with us or materially reduce the amount of business they conduct with us at any time. Our customer agreements relating to our core credit reporting service offered through our U.S.
On a regular basis, we evaluate our assets for impairment based on various factors, including actual operating results and expected trends of projected revenues, profitability and cash flows. As of December 31, 2024, our Consolidated Balance Sheet included goodwill of $5,144.3 million and other net intangibles of $3,257.5 million.
On a regular basis, we evaluate our assets for impairment based on various factors, including actual operating results and expected trends of projected revenues, profitability and cash flows. As of December 31, 2025, our Consolidated Balance Sheet included goodwill of $5,259.5 million and other net intangibles of $3,098.5 million.
In addition, a significant amount of our revenue is concentrated among certain customers, industries, product offerings and in distinct geographic regions, primarily in the United States. Our 2024 revenue in our U.S. Markets Financial Services and Consumer Interactive verticals accounted for approximately 34% and 14%, respectively, of consolidated gross revenues, respectively.
In addition, a significant amount of our revenue is concentrated among certain customers, industries, product offerings and in distinct geographic regions, primarily in the United States. Our 2025 revenue in our U.S. Markets Financial Services and Consumer Interactive verticals accounted for approximately 37% and 13%, respectively, of consolidated gross revenues, respectively.
The OCC expects especially rigorous 28 oversight of third-party relationships that involve certain “critical activities,” which include significant bank functions or significant shared services or other activities that could have a major impact on a bank’s operations.
The OCC and other regulators expect especially rigorous oversight of third-party relationships that involve certain “critical activities,” which include significant bank functions or significant shared services or other activities that could have a major impact on a bank’s operations.
Risks Related to Our Indebtedness We have a substantial amount of debt which could adversely affect our financial position and prevent us from fulfilling our obligations under the debt instruments. As of December 31, 2024 , the book value of our debt w as approximately $5,147.2 million consisting of outstanding borrowings under Trans Union LLC’s senior secured credit facility.
Risks Related to Our Indebtedness We have a substantial amount of debt which could adversely affect our financial position and prevent us from fulfilling our obligations under the debt instruments. As of December 31, 2025 , the book value of our debt w as approximately $5.1 billion primarily consisting of outstanding borrowings under Trans Union LLC’s senior secured credit facility.
Additionally, the regulatory framework for AI Technologies is rapidly evolving as many federal, state and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. In the United States, legislation related to AI Technologies has been introduced at the federal level and is advancing at the state level.
Additionally, the regulatory framework for AI Technologies is rapidly evolving as many federal, state and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. In the United States, legislation related to AI Technologies has been introduced at the federal level and 46 states have passed at least one law relating to AI Technologies.
The Office of the Comptroller of the Currency’s (the “OCC”) guidance to national banks and federal savings associations on assessing and managing risks associated with third-party relationships, which include all business arrangements between a bank and another entity, by contract or otherwise, requires banks to exercise comprehensive oversight throughout each phase of a bank’s business arrangement with third-party service providers, and instructs banks to adopt risk management processes commensurate with the level of risk and complexity of its third-party relationships.
Regulatory guidance to financial institutions like national banks (e.g., from The Office of the Comptroller of the Currency’s (the “OCC”)) on assessing and managing risks associated with third-party relationships, which include all business arrangements between a bank and another entity, by contract or otherwise, requires banks to exercise comprehensive oversight throughout each phase of a bank’s business arrangement with third-party service providers, and instructs banks to adopt risk management processes commensurate with the level of risk and complexity of its third-party relationships.
In March 2024, we received a NORA letter from the CFPB, informing us that the CFPB’s Enforcement Division was considering whether to recommend that the CFPB take legal action against us related to our dispute handling practices and procedures.
In March 2024, we received a Notice and Opportunity to Respond and Advise (“NORA”) letter from the CFPB, informing us that the CFPB’s Enforcement Division was considering whether to recommend that the CFPB take legal action against us related to our dispute handling practices and procedures.
For example, there have been increasingly nuanced allegations against companies making significant environmental and social claims due to a variety of perceived deficiencies in disclosure, methodology, or performance, including as stakeholder perceptions of sustainability continue to evolve.
For example, there have been increasingly nuanced allegations 34 Table of Contents against companies making significant sustainability claims due to a variety of perceived deficiencies in disclosure, methodology, or performance, including as stakeholder perceptions of sustainability continue to evolve.
In certain markets where we operate, macroeconomic conditions are 36 unfavorable. If these unfavorable macroeconomic conditions persist longer than we currently expect, or are worse than we currently expect, our estimates of revenue growth rates and EBITDA margins would decline, which could lead to an impairment of goodwill.
If these unfavorable macroeconomic conditions persist longer than we currently expect, or are worse than we currently expect, our estimates of revenue growth rates and EBITDA margins would decline, which could lead to an impairment of goodwill.
Our future success will depend, in part, upon our ability to: • internally develop and implement new and competitive technologies; • use leading third-party technologies effectively; • respond to changing customer needs and regulatory requirements, including being able to bring our new products to the market quickly; and • transition customers and data sources successfully to new interfaces or other technologies.
Our future success will depend, in part, upon our ability to: • internally develop and implement new and competitive technologies; • migrate our U.S. credit business to OneTru; • deliver OneTru capabilities in international markets; • use leading third-party technologies effectively; • respond to changing customer needs and regulatory requirements, including being able to bring our new products to the market quickly; and • transition customers and data sources successfully to new interfaces or other technologies.
During times of economic distress, declining demand and declining earnings could lead to us to have less favorable estimates of our future cash flows, discount rates or market multiples. Such changes could lead to lower estimated fair values of our reporting units, which could lead to a material impairment charge.
During times of economic distress, declining demand and declining earnings could lead to us to have less favorable estimates of our future cash flows, discount rates or market multiples. Such changes could lead to lower estimated fair values of our reporting units, which could lead to a material impairment charge. In certain markets where we operate, macroeconomic conditions are unfavorable.
Although we believe we have made appropriate provisions for taxes in the jurisdictions in which we operate, changes in tax laws, or challenges from tax authorities under existing tax laws could adversely affect our business, financial condition and results of operations.
Although we believe we have made appropriate provisions for taxes in the jurisdictions in which we operate, changes in tax laws, or challenges from tax authorities under existing tax laws could adversely affect our business, financial condition and results of operations. 37 Table of Contents ITEM 1B. UNRESOLVED STAFF COMMENTS None.
We conduct operations in over 30 countries and, in the fiscal year ended December 31, 2024, approximately 22.8% of our revenue was derived from our international operations, which subjects us to various risks inherent in global operations. We may conduct business in additional foreign jurisdictions in the future, which may carry operational risks.
We conduct operations in over 30 countries and, in the fiscal year ended December 31, 2025, approximately 22% of our reported revenue was derived by our international operations based on where it was earned, which subjects us to various risks inherent in global operations. We may conduct business in additional foreign jurisdictions in the future, which may carry operational risks.
Because we retain some portion of insurable risks, and in some cases retain our risk of loss completely, unforeseen or catastrophic losses in excess of insured limits could materially adversely affect our business, financial condition and results of operations.
For certain risks, we do not maintain insurance coverage because of cost and/or availability. Because we retain some portion of insurable risks, and in some cases retain our risk of loss completely, unforeseen or catastrophic losses in excess of insured limits could materially adversely affect our business, financial condition and results of operations.
Unauthorized disclosure, loss or corruption of our data or inability of our customers to access our systems could materially disrupt our operations, subject us to substantial regulatory and legal proceedings (including class actions) and potential liability, result in a material loss of business and/or significantly harm our reputation. 24 We may not be able to timely address the consequences of a cybersecurity incident because a successful breach of our computer systems, software, networks or other technology assets could persist for an extended period of time before being detected due to, among other things: • the breadth and complexity of our operations and the high volume of transactions that we process; • the large number of customers, counterparties and third-party service providers with which we do business; • the proliferation and increasing sophistication of cyberattacks; • the possibility that a malicious third party compromises the software, hardware or services that we procure from a service provider unbeknownst to both the provider and to TransUnion; or • the possibility that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems.
We may not be able to timely address the consequences of a cybersecurity incident because a successful breach of our computer systems, software, networks or other technology assets could persist for an extended period of time before being detected due to, among other things: • the breadth and complexity of our operations and the high volume of transactions that we process; • the large number of customers, counterparties and third-party service providers with which we do business; • the proliferation and increasing sophistication of cyberattacks; • the possibility that a malicious third party compromises the software, hardware or services that we procure from a service provider unbeknownst to both the provider and to TransUnion; or • the possibility that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems.
If this trend continues, it could result in more regulatory and legislative scrutiny of the practices of our industry and additional regulatory enforcement actions and litigation, which could adversely affect our business and results of operations.
In recent years, the consumer reporting industry has been subject to heightened scrutiny. If this trend continues, it could result in more regulatory and legislative scrutiny of the practices of our industry and additional regulatory enforcement actions and litigation, which could adversely affect our business and results of operations.
Various meteorological phenomena and extreme weather events (including, but not limited to, storms, flooding, drought, wildfire, and extreme temperatures) may directly or indirectly disrupt our operations (including the productivity of our employees) or those of our suppliers or infrastructure on which we rely, require us to incur additional operating or capital expenditures or otherwise adversely impact our business, financial condition, or results of operations.
Various meteorological phenomena and extreme weather events may directly or indirectly disrupt our operations or those of our suppliers or infrastructure on which we rely, require us to incur additional operating or capital expenditures or otherwise adversely impact our business, financial condition, or results of operations.
If we fail to retain our employees, we could incur significant expense replacing employees and our ability to provide quality services could diminish, resulting in a material adverse effect on our business. 37 We are subject to losses from risks for which we do not insure. For certain risks, we do not maintain insurance coverage because of cost and/or availability.
If we fail to retain our employees, we could incur significant expense replacing employees and our ability to provide quality services could diminish, resulting in a material adverse effect on our business. 36 Table of Contents We are subject to losses from risks for which we do not insure.
For example, in 2024, reported revenue from our International segment increased 10.7% including the impact of foreign currencies, or 11.7% on a constant currency basis which excludes the impact of foreign currencies.
For example, in 2025, reported revenue from our International segment increased 4.4% including the impact of foreign currencies, or 3.6% on a constant currency basis which excludes the impact of foreign currencies.
Such increased scrutiny may result in increased costs, changes in demand, enhanced compliance or disclosure obligations, increased legal exposure or other adverse impacts on our business, financial condition or results of operations.
Such scrutiny may result in increased costs, changes in demand, enhanced compliance or disclosure obligations, increased legal exposure or other adverse impacts on our business, financial condition or results of operations. Additionally, stakeholder expectations are not uniform and, at times, may conflict.
Many of our initiatives, including targets and disclosures, are informed by methodologies, standards, and data that continue to evolve, are subject to varying interpretations, and are often subject to factors outside of our control.
However, such initiatives may be costly and may not have the desired effect. Many of our initiatives, including targets and disclosures, are informed by methodologies, standards, and data that continue to evolve, are subject to varying interpretations, and are often subject to factors outside of our control.
Our total scheduled principal repayments of debt made in 2024 and 2023 were $48.9 million and $100.0 million, respectively. Our total interest expense for 2024 and 2023 was $265.2 million and $288.2 million, respectively.
Our total scheduled principal repayments of debt made in 2025 and 2024 were $78.5 million and $48.9 million, respectively. Our total interest expense for 2025 and 2024 was $235.8 million and $265.2 million, respectively.
Some of our competitors may be able to offer more attractive terms of employment. In addition, we invest significant time and expense in training our employees, which increases their value to competitors who may seek to recruit them.
In addition, we invest significant time and expense in training our employees, which increases their value to competitors who may seek to recruit them.
The projected future revenue growth rates and EBITDA margins, and the resulting projected cash flows of each reporting unit are based on historical experience and internal operating plans reviewed by management, extrapolated over the forecast period. Discount rates are determined using a weighted average cost of capital adjusted for risk factors specific to each reporting unit.
The projected future revenue growth rates and EBITDA margins, and the resulting projected cash flows of each reporting unit are based on historical experience and internal operating plans reviewed by management, extrapolated over the forecast period.
On April 12, 2022, after failed settlement negotiations with the CFPB related to the matter, the CFPB filed a lawsuit against us, Trans Union LLC, TransUnion Interactive, Inc.
On April 12, 2022, the CFPB filed a lawsuit against us, Trans Union LLC, TransUnion Interactive, Inc.
New competitors, or alliances among competitors, may emerge and gain significant market share. Existing or new competitors may develop products and services that are superior to ours or that achieve greater market acceptance.
Many of our competitors have extensive customer relationships, including relationships with our current and potential customers. New competitors, or alliances among competitors, may emerge and gain significant market share. Existing or new competitors may develop products and services that are superior to ours or that achieve greater market acceptance.
If a successful claim of infringement is brought against us and we fail to develop non-infringing products or services, or to obtain licenses on a timely and cost-effective basis, our reputation, business, financial condition and results of operations could be adversely affected.
If a successful claim of infringement is brought against us and we fail to develop non-infringing products or services, or to obtain licenses on a timely and cost-effective basis, our reputation, business, financial condition and results of operations could be adversely affected. 30 Table of Contents Risks Related to Our Growth Strategy When we engage in acquisitions, investments in new businesses or divestitures of existing businesses, we face risks that may adversely affect our business.
When these industries or the broader financial markets experience a downturn, demand for our services and revenues may be adversely affected. Our largest customers, and therefore our business and revenues, are influenced by macroeconomic conditions and are impacted by the availability of credit, the level and volatility of interest rates, inflation, employment levels, consumer confidence and housing demand.
Our largest customers, and therefore our business and revenues, are influenced by macroeconomic conditions and are impacted by the availability of credit, the level and volatility of interest rates, inflation, employment levels, consumer confidence and housing demand.
To the extent that our customers choose not to obtain services from us and instead rely on information obtained at little or no cost from these public and commercial sources, our business, financial condition and results of operations may be adversely affected. 22 Our relationships with key long-term customers may be materially diminished or terminated.
Beginning in April 2020, we began offering free credit reports on a weekly basis. To the extent that our customers choose not to obtain services from us and instead rely on information obtained at little or no cost from these public and commercial sources, our business, financial condition and results of operations may be adversely affected.