Changeflow GovPing Data Breach TABB Inc. Data Breach Notification
Priority review Notice Added Final

TABB Inc. Data Breach Notification

Favicon for atg.wa.gov WA Data Breach Notifications
Published October 25th, 2024
Detected March 1st, 2026
Email

Summary

TABB Inc., a business partner of The Brooklyn Hospital Center, is notifying individuals of a data breach discovered on August 14, 2024, which may have involved personal information including name and variable data elements. The company is offering 12 months of free identity protection services.

What changed

TABB Inc. has issued a data breach notification to individuals whose personal information may have been accessed due to a publicly discoverable database. The incident, discovered on August 14, 2024, involved data related to background checks conducted for clients, including The Brooklyn Hospital Center. The compromised information was determined on October 25, 2024, to include names and other variable data elements. While there is no evidence of misuse, TABB Inc. is offering a complimentary 12-month membership to Experian IdentityWorks Credit 3B for identity protection.

Regulated entities, particularly those in the healthcare sector that partner with third-party vendors like TABB Inc., should review their data security agreements and incident response plans. This notice serves as a reminder of the importance of robust data protection measures and vendor risk management. Individuals affected by the breach are encouraged to activate the provided identity protection services and remain vigilant against potential identity theft or fraud. For further assistance, a dedicated hotline has been established.

What to do next

  1. Review vendor contracts for data security clauses.
  2. Assess incident response plans for third-party data breaches.
  3. Ensure compliance with state data breach notification laws.

Source document (simplified)

Dear < < F irs tnam e> > < < Las tna me > >: <> T ABB, Inc. (“T ABB” or “we”), a business partner of The Brooklyn Hospital Center (“TBHC”), respects the privacy of the individuals whose data it maintains, which is why we are writing to advise you of a recent incident that may have involved some of your personal information. T ABB maintains this information in connection with certain services that we provide to TBHC. This letter explains the incident, the steps we have taken in response, and provides information on steps you may take to help protect your information, should you feel it is appropriate to do so. What Happened? On August 14, 2024, we were alerted that a database where we stored data related to background checks we conducted on our clients’ behalf was publicly discoverable to people who were able to identify where it was located. W e are committed to maintaining the privacy and security of the information entrusted to us and have remediated the miscalibration and secured the database. However, because T ABB could not rule out that the files in the database had been accessed during the time they were publicly available, we reviewed the contents of the files to determine if they contained any personal information. What Information W as Involved? On October 25, 2024, we determined that the files contained your <>. What W e Are Doing. W e have also taken steps to reduce the risk of this type of incident occurring in the future. W e are also notifying you of the incident so that you can be aware and take steps to protect your information, if you feel it is appropriate to do so. Although we do not have evidence of any information potentially involved in this incident being used for unauthorized purposes, out of an abundance of caution, we are offering a complimentary 12-month membership of Experian IdentityW orks Credit 3B. This product helps detect possible misuse of your personal information and provides you with identity protection services focused on prompt identification and resolution of identity theft. IdentityW orks Credit 3B is completely free to you and enrolling in this program will not hurt your credit score. For more information on identity theft prevention and IdentityW orks Credit 3B, including instructions on how to activate your complimentary membership, please see the additional information attached to this letter. What Y ou Can Do. While we have no evidence that your information has been misused, we encourage you to take advantage of the complimentary credit monitoring included in this letter. Y ou can also find more information on steps to protect yourself against possible identity theft or fraud on the enclosed Additional Important Information page. For Mor e Information. W e value the trust you place in us to protect your privacy, take our responsibility to safeguard information seriously, and apologize for any inconvenience this incident might cause. For further information and assistance, please call (844) 354-0255 from 8:00 a.m. to 5:30 p.m., Central T ime, Monday through Friday, excluding major U.S. holidays. Sincerely, T ABB, Inc. < > < > < > < < S U F F I X> > < > < > < >, < > < < POS T A L_CO D E> > << C O U N T R Y> > ELN-26227 << Ret u r n to K roll>> < > <> < > (F or m at: Month Day, Y ea r)

ACTIV A TING YOUR COMPLIMENT ARY CREDIT MONIT ORING T o help protect your identity, we are offering a complimentary membership of Experian IdentityW orks Credit 3B. This product helps detect possible misuse of your personal information and provides you with superior identity protection support focused on immediate identification and resolution of identity theft. Activate IdentityW orks Credit 3B Now in Three Easy Steps 1. ENROLL by: <> (Y our code will not work after this date.) 2. VISIT the Experian IdentityW orks website to enroll: https://www.experianidworks.com/3bcredit 3. PROVIDE the Activation Code: < > If you have questions about the product, need assistance with identity restoration or would like an alternative to enrolling in Experian IdentityW orks online, please contact Experian’ s customer care team at 877-288-8057. Be prepared to provide engagement number <> as proof of eligibility for the identity restoration services by Experian. ADDITIONAL DET AILS REGARDING YOUR EXPERIAN IDENTITYWORKS CREDIT 3B MEMBERSHIP: A credit card is not required for enrollment in Experian IdentityW orks Credit 3B. Y ou can contact Experian immediately regarding any fraud issues, and have access to the following features once you enroll in Experian IdentityW orks:  Experian credit r eport at signup: See what information is associated with your credit file. Daily credit reports are available for online members only.*  Credit Monitoring: Actively monitors Experian, Equifax and T ransunion files for indicators of fraud.  Identity Restoration: Identity Restoration specialists are immediately available to help you address credit and non-credit related fraud.  Experian IdentityW orks ExtendCARE TM: Y ou receive the same high-level of Identity Restoration support even after your Experian IdentityW orks membership has expired.  Up to $1 Million Identity Theft Insurance *: Provides coverage for certain costs and unauthorized electronic fund transfers. Activate your membership today at https://www.experianidworks.com/3bcredit or call 877-288-8057 to r egister with the activation code above. What you can do to protect your information: There are additional actions you can consider taking to reduce the chances of identity theft or fraud on your account(s). Please refer to www.ExperianIDW orks.com/restoration for this information. If you have any questions about IdentityW orks, need help understanding something on your credit report or suspect that an item on your credit report may be fraudulent, please contact Experian’ s customer care team at 877-288-8057. * Offline members will be eligible to call for additional reports quarterly after enrolling. * The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

Additional Important Information As a precautionary measure, we recommend that you remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing your account statements and monitoring credit reports closely. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. Y ou should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities, including the police and your state’ s attorney general, as well as the Federal T rade Commission (“FTC”). Y ou may wish to review the tips provided by the FTC on fraud alerts, security/credit freezes and steps you can take to avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-ID-THEFT (1-877-438-4338). Y ou may also contact the FTC at Federal T rade Commission, 600 Pennsylvania A venue, NW, W ashington, DC 20580. Credit Reports: By law, you may obtain a free copy of your credit report once every 12 months from each of the three national credit reporting agencies. The three national credit reporting agencies have also agreed to provide free weekly online credit reports. Y ou can obtain your free credit report by visiting www.annualcreditreport.com, by calling toll-free 1-877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. Y ou can print a copy of the request form at https://www.annualcreditreport.com/manualRequestForm.action. Alternatively, you may elect to purchase a copy of your credit report by contacting the three national credit reporting agencies. Contact information for the three national credit reporting agencies for the purpose of requesting a copy of your credit report or for general inquiries is as follows: Equifax 1-866-349-5191 www.equifax.com P.O. Box 740241 Atlanta, GA 30374 Experian 1-888-397-3742 www.experian.com P.O. Box 2002 Allen, TX 75013 T ransUnion 1-800-888-4213 www.transunion.com P.O. Box 1000 Chester, P A 19016 Fraud Alerts: By law, you have the right to place a fraud alert on your credit report if you believe you have been, or are about to become, a victim of fraud or related crime. A fraud alert is free and will stay on your credit report for one (1) year. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any new accounts in your name. T o place a fraud alert on your credit report, contact any of the three national credit reporting agencies using the contact information listed above. Additional information is available at www.annualcreditreport.com/protectY ourIdentity.action. Credit and Security Fr eezes: By law, you have the right to place a credit freeze, also known as a security freeze, on your credit file, so that no new credit can be opened in your name without the use of a PIN number that is issued to you when you initiate the freeze. A credit freeze is designed to prevent potential credit grantors from accessing your credit report without your consent. If you place a credit freeze, potential creditors and other third parties will not be able to get access to your credit report unless you temporarily lift the freeze. Therefore, using a credit freeze may delay your ability to obtain credit. Unlike a fraud alert, you must separately place a credit freeze on your credit file at each credit reporting company. Since the instructions for how to establish a credit freeze differ from state to state, please contact the three major credit reporting companies as specified below to find out more information: Equifax Security Freeze 1-888-298-0045 https://www.equifax.com/personal/ credit-report-services/credit-freeze/ P.O. Box 105788 Atlanta, GA 30348 Experian Security Freeze 1-888-397-3742 https://www.experian.com/freeze/ center.html P.O. Box 9554 Allen, TX 75013 T ransUnion Security Freeze 1-800-916-8800 https://www.transunion.com/ credit-freeze P.O. Box 160 W oodlyn, P A 19094 This notification was not delayed by law enforcement. Iowa Residents: Iowa residents can contact the Office of the Attorney general to obtain information about steps to take to avoid identity theft from the Iowa Attorney General’ s Office at: Office of the Attorney General of Iowa, Hoover State Office Building, 1305 E. W alnut Street, Des Moines IA 50319, 515-281-5164. Maryland Residents: Maryland residents can contact the Office of the Attorney General to obtain information about steps you can take to avoid identity theft from the Maryland Attorney General’ s Office at: Office of the Attorney General, 200 St. Paul Place, Baltimore, MD 21202, (888) 743-0023, http://www.marylandattorneygeneral.gov/.

New Mexico Residents: Individuals have rights under the Fair Credit Reporting Act. W e encourage you to review your rights under the Fair Credit Reporting Act by visiting https://files.consumerfinance.gov/f/documents/bcfp_consumer - rights-summary2018-09.pdf, or by requesting information in writing from the Consumer Financial Protection Bureau, 1700 G Street N.W., W ashington, DC 20552. New Y ork State Residents: New Y ork residents can obtain information about preventing identity theft from the New Y ork Attorney General’ s Office at: Office of the Attorney General for the State of New Y ork, Bureau of Consumer Frauds & Protection, The Capitol, Albany, New Y ork 12224-0341; https://ag.ny.gov/consumer-frauds/identity-theft; (800) 771-7755. North Carolina Residents: North Carolina residents can obtain information about preventing identity theft from the North Carolina Attorney General’ s Office at: North Carolina Attorney General’ s Office, Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699-9001; 877-5-NO-SCAM (T oll-free within North Carolina); 919-716-6000; www.ncdoj.gov. Oregon Residents: Oregon residents are advised to report any suspected identity theft to law enforcement, including the Federal T rade Commission and the Oregon Attorney General. Oregon residents can contact the Oregon Attorney General at 1 162 Court St. NE, Salem, OR 97301-4096; 503-378-4400; https://www.doj.state.or.us/. Rhode Island Residents: W e believe that this incident affected __ Rhode Island residents. Rhode Island residents can contact the Office of the Attorney General at: Rhode Island Office of the Attorney General, 150 South Main Street, Providence, RI 02903, (401) 274-4400, www.riag.ri.gov. Y ou have the right to obtain any police report filed in regard to this incident. If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it. V ermont Residents: If you do not have internet access but would like to learn more about how to place a security freeze on your credit report, contact the V ermont Attorney General’ s Office at 802-656-3183 (800-649-2424 toll free in V ermont only).

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
Various State Agencies
Published
October 25th, 2024
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Healthcare providers Consumers
Geographic scope
National (US)

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Consumer Protection Healthcare

Get Data Breach alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when WA Data Breach Notifications publishes new changes.

Free. Unsubscribe anytime.