The credit bureau has said the July breach was brought on by an unidentified third party and was quickly contained.