TKG Reports Data Breach Impacting Sensitive Personal and Health Information
TKG, a data management provider, disclosed a security breach to the Idaho Attorney General after detecting unauthorized access to its systems on November 18, 2025. The incident, attributed to an unknown third party, prompted an internal investigation to assess the scope of the compromise.
The investigation confirmed that sensitive data including names, Social Security numbers, addresses, and medical information may have been accessed and exfiltrated. The exact details of exposed information vary by individual. On January 5, 2026, TKG began notifying affected individuals via mail, providing specifics on the compromised data and offering complimentary credit monitoring services as part of the response.
The breach notice, filed with the Idaho Attorney General, outlines the incident’s timeline and the steps taken to mitigate potential harm. No further details on the attack vector or the number of impacted individuals have been publicly released.
Source: https://straussborrelli.com/2026/01/12/tlusty-kennedy-glascock-data-breach-investigation/
TKG (The Kleinbach Group) cybersecurity rating report: https://www.rankiteo.com/company/the-kleinbach-group
"id": "THE1768252174",
"linkid": "the-kleinbach-group",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Impacted individuals (number '
'not specified)',
'name': 'TKG'}],
'customer_advisories': 'Data breach notification letters mailed to impacted '
'individuals',
'data_breach': {'personally_identifiable_information': ['Name',
'Social Security '
'number',
'Address',
'Medical information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal identifiable '
'information',
'Protected health information']},
'date_detected': '2025-11-18',
'date_publicly_disclosed': '2026-01-05',
'description': 'TKG reported a data breach where sensitive personal '
'identifiable information and protected health information may '
'have been compromised by an unknown third party.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'and protected health information',
'identity_theft_risk': 'High'},
'investigation_status': 'Completed review of impacted data',
'recommendations': 'Providing affected individuals with complimentary credit '
'monitoring services',
'references': [{'source': 'Attorney General of Idaho'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
'Attorney General of '
'Idaho'},
'response': {'communication_strategy': 'Mailed data breach notification '
'letters to impacted individuals',
'incident_response_plan_activated': 'Launched an investigation',
'remediation_measures': 'Review of impacted data and '
'identification of affected individuals'},
'threat_actor': 'Unknown third party',
'title': 'TKG Data Breach',
'type': 'Data Breach'}