The credit reporting giant confirmed unauthorized access to a third-party application storing the personal information of its customers, including Social Security numbers.