AccidentalTechnologyInformationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

TABB Inc.

bd_60428e15f1003363 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 14, 2024

Filed

Feb 12, 2026

To disclose

18 months

Affected

1state residents only

Linked

11 filings

Confidence

66%

Full breach record for TABB Inc. →3 incidents on file

TABB INC. notified the Iowa AG that a database containing background check data was publicly discoverable on August 14, 2024. One Iowa resident's name, SSN, and driver's license number were potentially exposed. TABB secured the database and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday18 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 18 months / 547 days

Aug 14, 2024

Begins

Aug 14, 2024

Discovered

Feb 12, 2026

Filed

vs. sector median

+59 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_595ab5f6f0066bae2026-02-12Candidate
Oregon State AGbd_5ad5c3fdf8a359c02026-02-12Verified
Nebraska State AGbd_69e54293eeb04a432026-02-12Verified
Maine State AGbd_d2d506cd84fd75e92026-02-12Verified

Show 6 more filings ↓up to 18d gap

South Carolina State AGbd_04d6f72d7bb420582026-02-13 · +1dVerified
Texas State AGbd_0778b3fa3ed869da2026-02-13 · +1dVerified
Nebraska State AGbd_83b36a554603befd2026-02-17 · +5dVerified
Illinois State AGbd_7141c272f403cc262026-03-01 · +17dVerified
New Hampshire State AGbd_587e2c6b60bdfa522026-03-02 · +18dVerified
Maine State AGbd_85df1d7e9c786d9d2026-03-02 · +18dVerified

Name: Polsinelli PC
norm: polsinelli

Name: TABB Inc.
norm: tabb
Industry: Technologyllm

Discovered: Aug 14, 2024
Breach occurred: Aug 14, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 12, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External

During the incident: Remediated the miscalibration and secured the database
Offering twelve (12) months of complimentary credit monitoring services
Undertaking efforts to reduce the risk of a similar incident occurring in the future, including enhancing its technical security measures
Changes made: Enhancing its technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 months(547 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

California State AGFeb 12 · first

Oregon State AGFeb 12 · first

Nebraska State AGFeb 12 · first

Maine State AGFeb 12 · first

Iowa State AGFeb 12 · first · this page

South Carolina State AG+1d

Texas State AG+1d

Nebraska State AG+5d

Illinois State AG+17d

New Hampshire State AG+18d

Maine State AG+18d

Pattern: first filing Feb 12 (CA), last Mar 2 (ME) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/2122026_TABB_INC_C2E8C3EA8C219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2026
Raw hash: b85d0285402bd6df9b1faa35171707238bd3065686eeddf3275f08fda180879f

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityPolsinelli PC

Victim entityTABB Inc.

Incidentdiscovered Aug 14, 2024

Stated responseRemediated the miscalibration and secured the database

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov