AI-generated illustration; not a photograph of the reported event.
- calendar_today November 3, 2026
Fraudulent Email Alarm Raises Concern Among Tennessee Businesses
Over the weekend, a fraudulent email was sent from an account appearing to belong to the Tennessee Alcoholic Beverage Commission (TABC). The message falsely claimed that the state was immediately lifting all restrictions related to hemp-derived cannabinoid products and authorized the sale of Kratom products. In addition, the email indicated that TABC licensing accounts had been deleted and that inspections were now optional. This has prompted a significant cybersecurity investigation by state authorities.
Email Targets Businesses with Sensitive Licensing Information
The incident occurred on Saturday morning and impacted thousands of businesses licensed to sell hemp-derived cannabinoid products in Tennessee. The email included official-looking details such as business names, license numbers, and expiration dates, leading recipients to believe it was legitimate. Rahul Arora, special adviser to the Tennessee Healthy Alternatives Association, stated, “So it definitely felt like it was a legitimate email.”
Rapid Response Highlights Severity of Email Scam
More than an hour after the email was distributed, the TABC issued a warning to its members. The commission urged recipients not to click any links contained within the email and clarified that all existing laws, rules, licensing requirements, product restrictions, and inspection mandates remained unchanged. The TABC categorized the message as fraudulent and emphasized that its enforcement practices were still fully in effect.
Cybersecurity Investigation Launched by State
While the fake email appeared to come from an authentic TABC account, officials have not confirmed whether the account was hacked. The Tennessee Department of Finance and Administration’s Division of Strategic Technology Solutions, which serves as the central information technology bureau for state departments, is leading the investigation. In a statement, the TABC noted that if evidence of unauthorized activity is found, the case will be referred to the Tennessee Bureau of Investigation (TBI) for further action.
Businesses Express Data Protection Concerns
Several business owners voiced concerns over the extent of personal and financial information housed by the TABC that could have been exposed in the incident. Rodney Croteau, owner of Green Daisy, pointed out that licensing applications require EIN numbers and detailed business data, raising the stakes for ensuring data security. “So I’m assuming this was a big wake-up call for some folks there that they need to strengthen the cybersecurity around their data and make sure that something like this can’t happen again in the future,” Croteau said.
Next Steps in the Investigation
The TABC vows to share additional details as the investigation unfolds. State authorities are emphasizing the importance of data protection and are committed to taking every necessary measure to ensure the security of business and personal information stored by government agencies.
Source: wkrn.com.
