Tessco LLC says a breach exposed Social Security numbers and financial data, including information belonging to minors, five months after a ransomware group claimed an attack on the company
A Maryland-based distributor of wireless infrastructure equipment, Tessco LLC disclosed a data breach that exposed Social Security numbers and financial account information, including data belonging to minors.
Tessco, formerly known as TESSCO Technologies Incorporated and headquartered in Hunt Valley, Maryland, has supplied products for building and maintaining wireless networks for more than 40 years and employs between 501 and 1,000 people. The company has not publicly disclosed the specific nature of the incident, the exact dates the breach occurred, or how it was discovered.
The notice filed with the Vermont attorney general’s office said the breach affected two Vermont residents, with additional individuals potentially affected nationwide, and listed Social Security numbers, financial account information and credit and debit account information as the data involved. A separate Massachusetts notification, dated Sept. 16, listed names and information belonging to minor dependents as confirmed compromised data, suggesting the types of information exposed varied by individual.
The regulatory filings came nearly five months after the ransomware group PayoutsKing claimed responsibility for an attack on Tessco on April 30, 2026. According to threat intelligence sources and outside researchers, PayoutsKing alleged it had exfiltrated and encrypted approximately 615 gigabytes of data, including contact information for more than 100,000 individuals and Salesforce records for more than 500,000 customers. Those figures are attacker claims and have not been confirmed by Tessco. Outside researchers have also reported that addresses, phone numbers, email addresses and dates of birth may have been exposed, though the company has not officially confirmed those additional data types. Tessco has no prior confirmed data breaches on record.
Tessco is offering affected minors 24 months of complimentary identity monitoring and restoration services through Experian IdentityWorks. Parents and guardians can enroll using an activation code included in their notification letter through Dec. 31, 2026, or contact Experian’s customer care line.
No class action lawsuit had been filed as of the most recent reporting, though multiple law firms, including Federman & Sherwood and Almeida Law Group, said they are investigating whether Tessco implemented reasonable cybersecurity safeguards and whether additional measures could have prevented or reduced the breach’s impact.
