TABB Inc on behalf of Crudem Foundation data breach

Clerk's notes

TABB Inc, acting on behalf of the Crudem Foundation, officially reported a data security incident to the Indiana Attorney General on February 17, 2026. This breach, which occurred on August 14, 2024, involved the exposure of sensitive personal data, including Full Name, Date of Birth, Social Security Number, Mailing Address, Email Address, Medical Record Number, Health Insurance ID Number, and Donor and Financial Contribution Records. The incident is currently listed as under monitoring by regulatory bodies.

Operating within international healthcare administration and philanthropic medical outreach, TABB Inc manages extensive sensitive information. This includes administrative records, clinical documentation, and identifying details of individuals associated with its healthcare delivery initiatives. Such organizations are frequently targeted by cyber actors seeking to harvest confidential data, often through unauthorized access to centralized cloud repositories, ransomware, or third-party vendor compromises, by exploiting network vulnerabilities or compromised credentials.

The exposure of such comprehensive personal identifiers, contact details, and financial records poses significant risks to those affected. Individuals may face a heightened risk of targeted identity theft, medical identity fraud where unauthorized parties use stolen information to obtain medical care, and financial account takeover. The unauthorized release of this data can lead to prolonged periods of vigilance required from victims, who may need to continuously monitor credit reports, medical billing statements, and financial accounts for suspicious activity.

As an entity entrusted with sensitive personal and health-related information, TABB Inc was subject to rigorous legal and regulatory obligations to secure its digital environment. Both Indiana state data protection laws and potentially federal frameworks such as the Health Insurance Portability and Accountability Act (HIPAA) necessitate robust administrative, physical, and technical safeguards. The occurrence of this data breach suggests a potential failure to uphold these foundational security duties, rendering confidential networks vulnerable to intrusion.

If you received an official data security notification letter from TABB Inc or the Crudem Foundation, it confirms that your private information was compromised. Receiving this notice can establish the necessary standing to participate in a class action lawsuit seeking to hold the organization accountable for its cybersecurity failures. You do not need to demonstrate actual financial loss or identity theft to pursue potential legal remedies; the mere exposure of your confidential data can constitute a cognizable injury. We are currently investigating claims related to this incident on a contingency fee basis.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.