Tabb Inc. Security Gaffe Exposes 200,000 Background Check Files for More Than Six Months

A researcher discovered Tabb Inc.’s unsecured Azure backup blob exposing roughly 200,000 job applicant background-check files spanning 15 years, including highly sensitive PII (SSNs, driver’s licenses, DOBs, and criminal records). After repeated ignored notifications beginning July 20, 2024, the data was finally secured on August 13, 2024; Tabb later stated notifications would be sent and a forensic review conducted, though its regulatory filings cited inaccurate incident and discovery dates. Healthcare clients were among those impacted, and breach notification obligations may apply depending on access logs and state laws.