AccidentalFinancial ServicesFinanceMisconfigurationData EncryptedData DestroyedDelayed DiscoveryPIIIdentity (basic)LowResolved

TransGlobal Insurance Agency, Inc.

bd_da1bc0c6ae5fa765 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 18, 2026

Filed

Jul 20, 2026

To disclose

22 weeks

Affected

Not disclosed

Linked

14 filings

Confidence

65%

Full breach record for TransGlobal Insurance Agency, Inc. →

TransGlobal Insurance Agency reports a supplemental cybersecurity incident where four MongoDB databases were wiped by an automated scanning attack exploiting a misconfigured authentication state. The incident was discovered on Feb 18, 2026, and resolved by migrating to MongoDB Atlas. Notices were sent to affected individuals by May 20, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 22 weeks / 152 days

Feb 4, 2026

Begins

Feb 18, 2026

Discovered

Jul 20, 2026

Filed

vs. sector median

+13 wks slower

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_c0fd390cbccd76322026-07-20Verified
Vermont State AGbd_8de1e54200c8bc462026-07-21 · +1dVerified
Oregon State AGbd_c99921eda0ce21432026-07-29 · +9dVerified
Texas State AGbd_1f5043965c79a7902026-05-06 · +75dVerified

Show 6 more filings ↓up to 82d gap

Oregon State AGbd_6100e7841357ed4b2026-05-05 · +76dVerified
Washington State AGbd_9a356a13e7ce75d12026-05-05 · +76dVerified
New Hampshire State AGbd_a3a3c6dcc4af298d2026-05-05 · +76dVerified
Maine State AGbd_51a73c4f20ccb6ae2026-05-04 · +77dVerified
Idaho State AGbd_9dfd5c52cfff30f02026-04-30 · +81dVerified
California State AGbd_3a670028336b7e1d2026-04-29 · +82dVerified

Showing first 10 of 13 linked disclosures.

Name: Jackson Lewis P.C.
norm: jackson lewis

Name: TransGlobal Insurance Agency, Inc.
norm: transglobal insurance agency
Industry: Financial Servicesllm

Discovered: Feb 18, 2026
Breach occurred: Feb 4, 2026 – Feb 18, 2026
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 20, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Filed supplemental notification with Idaho Attorney General's Office Consumer Protection Division
Initial access: exploit_public_facing

During the incident: Hired a third-party investigator, Riskmancer, to investigate the Incident and assist with development of a remediation plan
Contained the incident by shutting down the compromised MongoDB container and preserving the host for forensic analysis
Rebuilt the environment by migrating to MongoDB Atlas (managed cloud)
Implemented enforced authentication, IP allowlisting, TLS encryption, continuous backups, and database auditing
Restored clean data from a pre-incident backup
Migrated all environments to MongoDB Atlas by February 25, 2026
Coordinated efforts to prepare notices to all impacted individuals with a third-party vendor
Sent notification letters to all impacted individuals by mail
Changes made: Migrated to MongoDB Atlas (managed cloud)
Implemented enforced authentication
Implemented IP allowlisting
Implemented TLS encryption
Implemented continuous backups
Implemented database auditing
Eliminated reliance on previously self-hosted database infrastructure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(152 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

California State AGApr 29 · first

Idaho State AG+1d

Maine State AG+5d

Oregon State AG+6d

Washington State AG+6d

New Hampshire State AG+6d

Texas State AG+7d

California State AG+82d

Idaho State AG+82d · this page

Vermont State AG+83d

Oregon State AG+91d

Pattern: first filing Apr 29 (CA), last Jul 29 (OR) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2026/07/2026.07.20-TransGlobal-Insurance-Agency.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 20, 2026
Raw hash: b20ca53013af8c37bb4fb7325c82e852d41d40ed9279d1d072008822b09c3084

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityJackson Lewis P.C.

Victim entityTransGlobal Insurance Agency, Inc.

Incidentdiscovered Feb 18, 2026

Stated responseHired a third-party investigator, Riskmancer, to investigate the Incident and assist with development of a remediation plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov