Months after its discovery, following intervention from PIRG and the Washington Post, TransUnion finally fixed the flaw.