2026 Tessco — VT/MA AG notices; SSNs & financial data incl. minors (PayoutsKing claimed Apr)
Data compromised
Per Vermont AG (2 VT residents listed) and Massachusetts notice: Social Security numbers, financial account / credit-debit information; MA notice confirmed names and minor-dependent information for some individuals. Nationwide headcount unpublished. PayoutsKing actor claims (~100k contacts / ~500k Salesforce customer records / 615 GB) remain unverified.
Technical writeup
Verified Tessco, LLC state regulatory notices — Vermont AG security-breach listing dated September 16, 2026 (2 Vermont residents; SSN, financial account codes, credit/debit info) and Massachusetts OCABR notice same date confirming compromise of names and minor-dependent information for some individuals. Tessco offering affected minors 24 months Experian IdentityWorks (enroll by Dec 31, 2026). Company has not published incident dates, root-cause narrative, or nationwide census. Nearly five months earlier (April 30, 2026) ransomware group PayoutsKing claimed Tessco, alleging ~615 GB exfiltration including contacts for >100k individuals and Salesforce records for >500k customers — those actor figures are unverified and not adopted as company-confirmed counts. recordsAffected 0 (no nationwide census); companyConfirmed true for the AG-attested exposure.
Root cause
Unauthorized acquisition of personal information; Tessco filed state AG notices Sep 16, 2026. PayoutsKing claimed ~615 GB ransomware attack April 30, 2026 (actor figures unverified)