Tessco discloses data breach involving Social Security numbers of minors

Tessco LLC, a Maryland-based distributor of wireless infrastructure equipment, disclosed a data breach that exposed Social Security numbers and financial account information, including data belonging to minors.

Tessco, formerly known as TESSCO Technologies Incorporated and headquartered in Hunt Valley, Maryland, has supplied products for building and maintaining wireless networks for more than 40 years and employs between 501 and 1,000 people. The company has not publicly disclosed the specific nature of the incident, the exact dates the breach occurred, or how it was discovered.

The notice filed with the Vermont attorney general’s office said the breach affected two Vermont residents, with additional individuals potentially affected nationwide, and listed Social Security numbers, financial account information and credit and debit account information as the data involved. A separate Massachusetts notification, dated Sept. 16, listed names and information belonging to minor dependents as confirmed compromised data, suggesting the types of information exposed varied by individual.

The regulatory filings came nearly five months after the ransomware group PayoutsKing claimed responsibility for an attack on Tessco on April 30, 2026. According to threat intelligence sources and outside researchers, PayoutsKing alleged it had exfiltrated and encrypted approximately 615 gigabytes of data, including information for more than 100,000 individuals and Salesforce records for more than 500,000 customers. Those figures are attacker claims and have not been confirmed by Tessco. Outside researchers have also reported that addresses, phone numbers, email addresses and dates of birth may have been exposed, though the company has not officially confirmed those additional data types. Tessco has no prior confirmed data breaches on record.

Tessco is offering affected minors 24 months of complimentary identity monitoring and restoration services through Experian IdentityWorks. Parents and guardians can enroll using an activation code included in their notification letter through Dec. 31, 2026, or Experian’s customer care line.

No class action lawsuit had been filed as of the most recent reporting, though multiple law firms, including Federman & Sherwood and Almeida Law Group, said they are investigating whether Tessco implemented reasonable cybersecurity safeguards and whether additional measures could have prevented or reduced the breach’s impact.

Please take 30 seconds to register

Already have an account? Sign in

"If we think of usability and security as mutually exclusive - we have failed" - Jerrod Chong, Yubico

#teissLondon2018: On the internet, nobody knows you are a fridge

1 in 6 gamers disable all AV in the pursuit of the highest possible speeds

10 malicious Python Libraries discovered on PyPI Repository

126,000 affected by cyberattack on New Zealand patient portal Manage My Health

"If we think of usability and security as mutually exclusive - we have failed" - Jerrod Chong, Yubico

#teissLondon2018: On the internet, nobody knows you are a fridge

1 in 6 gamers disable all AV in the pursuit of the highest possible speeds

10 malicious Python Libraries discovered on PyPI Repository

126,000 affected by cyberattack on New Zealand patient portal Manage My Health

19-year-old claims he hacked into over 25 Tesla cars in 13 countries

2020 cybersecurity trends and resolutions

2025 in review: why cyber-security became a boardroom crisis

Closing the exposure window — unifying continuous threat exposure management

Trusting your AI agents

The blind spots in your stack - why fragmented data security fails

Winston House, 3rd Floor, Units 306-309, 2-4 Dollis park, London, N3 1HF