AccidentalTechnologyInformationMisconfigurationCustomer Data InvolvedIdentity (basic)PIIMediumContained

TABB Inc.

bd_d2d506cd84fd75e9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2024

Filed

Feb 12, 2026

To disclose

16 months

Affected · nationwide

5,3091 in this filing

Linked

11 filings

Confidence

65%

Full breach record for TABB Inc. →3 incidents on file

TABB Inc. disclosed an inadvertent data breach affecting 5,309 individuals, including 1 Maine resident. On August 14, 2024, a database containing background check data was publicly discoverable due to misconfiguration. TABB discovered the breach on October 25, 2024, and notified affected individuals on February 12, 2026, offering 12 months of Experian credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 25, 2024 → Filed with AG Feb 12, 2026475d ✗ ME AG >90d16 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 72 days

discovery → filing · 16 months / 475 days

Aug 14, 2024

Begins

Oct 25, 2024

Discovered

Feb 12, 2026

Filed

vs. sector median

+49 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_595ab5f6f0066bae2026-02-12Candidate
Oregon State AGbd_5ad5c3fdf8a359c02026-02-12Verified
Iowa State AGbd_60428e15f10033632026-02-12Verified
Nebraska State AGbd_69e54293eeb04a432026-02-12Verified

Show 6 more filings ↓up to 18d gap

South Carolina State AGbd_04d6f72d7bb420582026-02-13 · +1dVerified
Texas State AGbd_0778b3fa3ed869da2026-02-13 · +1dVerified
Nebraska State AGbd_83b36a554603befd2026-02-17 · +5dVerified
Illinois State AGbd_7141c272f403cc262026-03-01 · +17dVerified
New Hampshire State AGbd_587e2c6b60bdfa522026-03-02 · +18dVerified
Maine State AGbd_85df1d7e9c786d9d2026-03-02 · +18dVerified

Name: TABB Inc.
norm: tabb

Name: TABB Inc.
norm: tabb
Industry: Technologyllm

Discovered: Oct 25, 2024
Breach occurred: Aug 14, 2024
Undetected for: 72 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 12, 2026
Affected individuals: 5,309state + nationwide
Data types: Identity (basic)PII
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application

During the incident: Remediated the miscalibration and secured the database
Offering a complimentary 12-month membership of Experian IdentityWorks Credit 3B
Changes made: Remediated the miscalibration and secured the database
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 months(475 days from discovery to filing)
Compliance flags: ME AG >90d · 475dME resident >180d · 475d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 25, 2024
→ Filed with AG: Feb 12, 2026
475d 90 days ME AG >90d
Maine
Discovered: Oct 25, 2024
→ Notified: Feb 12, 2026
475d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 25, 2024 → Filed with AG: Feb 12, 2026	475d	90 days	ME AG >90d
Maine	Discovered: Oct 25, 2024 → Notified: Feb 12, 2026	475d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

California State AGFeb 12 · first

Oregon State AGFeb 12 · first

Iowa State AGFeb 12 · first

Nebraska State AGFeb 12 · first

Maine State AGFeb 12 · first · this page

South Carolina State AG+1d

Texas State AG+1d

Nebraska State AG+5d

Illinois State AG+17d

New Hampshire State AG+18d

Maine State AG+18d

Pattern: first filing Feb 12 (CA), last Mar 2 (ME) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/85f630dc-42e6-439c-9b8e-7c3cbc576984.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2026
Raw hash: b5d4211b9c11f97b6d4fc911615e4ec64d5b7fc6f1d75574a1103760993314d9

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityTABB Inc.

Victim entityTABB Inc.

Incidentdiscovered Oct 25, 2024

Stated responseRemediated the miscalibration and secured the database

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov