TABB, Inc. (“TABB”), a business partner of The Brooklyn Hospital Center (TBHC), has disclosed a data security incident involving a database used to store information related to background checks performed on behalf of its clients. On August 14, 2024, TABB was alerted that this database had been publicly discoverable to anyone able to locate it. TABB subsequently remediated the database misconfiguration and secured the affected system.
Because TABB could not confirm whether files were accessed while publicly exposed, it launched a detailed review of the database. On October 25, 2024, TABB determined that the files contained personal information belonging to certain individuals associated with TBHC’s background-check process. Formal notification letters were sent to affected individuals after this review.
TABB is a New Jersey-based, accredited company specializing in pre-employment background checks, drug screenings, and reference evaluations.
As part of its response, TABB is offering 12 months of complimentary Experian IdentityWorks Credit 3B, an identity monitoring and fraud‑resolution service.
If you received a Data Breach notification letter from TABB, it confirms that your personal information may have been exposed as a result of this incident.
What information is involved in the TABB, Inc. Data Breach?
Compromised information may include:
Full Name
Background-check-related data elements (specific variable data elements identified in each individual notice)
Your Personally Identifiable Information (PII) includes details that can be used to identify you, while prescription information may relate to sensitive health‑related data tied to your contact lens order. Organizations that maintain this information must take appropriate steps to safeguard it under state and federal data‑privacy requirements.
If Protected Health Information (PHI) was involved, the exposed data may include medical information protected under HIPAA and state privacy laws. PHI exposure increases the risk of medical fraud, insurance fraud, and unauthorized use of confidential health data.
TABB states it has no evidence that any information has been used for unauthorized purposes at this time.
Residents of California benefit from enhanced privacy protections under the California Consumer Privacy Act (CCPA), which provides additional rights regarding the collection, storage, and protection of personal information. California residents may also have additional legal remedies when personal data is compromised in a breach.
Nonetheless, identity theft can occur months or even years after a breach, which is why monitoring services are strongly recommended.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.