To briefly reiterate my reddit post, I believe someone (or thing) set up a TransUnion account with my info. I tried to set up an account with TransUnion to set up a Fraud-Alert, but they said that 'it appeared I already had an account'. While trying to recover the password, it brought me to a security question page. The security question looks a little bit like something a script would generate [2].

Can anyone shed some more light on whether TransUnion could have a vulnerability? I do not recall seeing an 'I'm not a machine' captcha test when I tried to sign up for an account.

Many thanks, and happy hacking!

[1] https://www.reddit.com/r/personalfinance/comments/70ws1s/i_think_someone_else_created_a_transunion_account/

[2] https://imgur.com/a/3SAwe