HackingStolen CredentialsEmployee Data InvolvedIDENTITY_BASICPIILowContained
TENGA USA INC
bd_685efd5d403e5e9a · schema v1 · pii pii-v1
Full breach record for TENGA USA INC →TENGA USA INC reported that on February 13, 2026, an unauthorized party gained access to an employee's professional email account. The attacker used the account to send unsolicited spam emails to contacts. Affected data included names, email addresses, and historical email correspondence. No SSNs or billing information were involved. The company reset credentials, enabled MFA, and notified law enforcement.
California clockDiscovered Feb 13, 2026 → Notified Feb 13, 20260d ✓ CA 30-day OK≤1 day discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-618775
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 13, 2026
- Raw hash
- 6758bc938e4b87ca70f9e58f89e90c9f01334228182f505d7685b7e87450a501
Reporting entity
- Name
- TENGA USA INCnorm: tenga usa
Victim entity
- Name
- TENGA USA INCnorm: tenga usa
Incident
- Discovered
- Feb 13, 2026
- Materiality determined
- —
- Notification sent
- Feb 13, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified law enforcement of the unauthorized access
- Initial access
- valid_credentials
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- CA 30-day OK · 0dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2026→ Notified: Feb 13, 20260d 30 calendar days CA 30-day OK California Consumers notified: Feb 13, 2026→ AG copy submitted: Feb 13, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.