This is EmailMeNow’s multi-source breach data week snapshot for November 1, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.
Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 585 |
| Texas OAG | Texans affected | 38,826,362 |
| HHS OCR | 2026 submissions | 426 |
| HHS OCR | Individuals (2026) | 77,978,177 |
| SEC Form 8-K | Item 1.05 families YTD | 24 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 29 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 54 |
| California AG | YTD notices | 479 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 886,990 |
| Have I Been Pwned | 2026 listings | 91 |
| Have I Been Pwned | Accounts (2026 listings) | 296,955,701 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +29 (556 → 585)
- Texas YTD affected +1,456,224 (37,370,138 → 38,826,362)
- HHS 2026 submissions +18 (408 → 426)
- HHS 2026 individuals +8,763,791 (69,214,386 → 77,978,177)
- SEC 8-K Item 1.05 families YTD +2 (22 → 24)
Source roundups this week
Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.
| Source | Roundup | Tracker |
|---|---|---|
| SEC Form 8-K | October 30, 2026 | Open tracker |
| Texas OAG | October 30, 2026 | Open tracker |
| California AG | October 27, 2026 | Open tracker |
| Have I Been Pwned | October 27, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through November 1, 2026 (22 shown; 22 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| Koil Energy Solutions, Inc. | SEC Form 8-K | peoplesenergy.co.uk |
| Revolve Group, Inc. | SEC Form 8-K | revolve.com |
| Marathon Health | Texas OAG | marathonhealth.com.au |
| Revolve Group, Inc. | Texas OAG | revolve.com |
| Hippo Analytics Inc. | Texas OAG | hippoanalytics.com |
| HCA Healthcare, Inc. | Texas OAG | airtificial.com |
| The Krum Public Library | Texas OAG | krumlibrary.org |
| Troutman Pepper Locke LLP | Texas OAG | troutman.com |
| Del Monte Foods Corporation II Inc. | Texas OAG | delmontefoods.com |
| Blossom BH Opco Inc. | Texas OAG | blossom.com |
| Trimera Health | Texas OAG | trimerahealth.net |
| Metro Tulsa Foot & Ankle Specialist | Texas OAG | tulsafoot.com |
| Granbury ISD | Texas OAG | granburyisd.org |
| The Vant Group, Inc. | Texas OAG | vant.com |
| American Campus Communities LLC | Texas OAG | americancampus.com |
| Baker & McKenzie LLP | California AG | bakermckenzie.com |
| Directed Trust Company | California AG | directedtrust.com |
| Hitec Group USA | California AG | hitec-usa.com |
| Indico Data Solutions | California AG | indicodata.ai |
| Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”) | California AG | sarasota.com |
| Tradier Brokerage Inc. | California AG | tradierbrokerage.com |
| AfD | Have I Been Pwned | afd.de |
Independent Cybersecurity Audits
EmailMeNow domain audits on November 1, 2026 scored 16 filer domains in this batch.
14 of 16 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Baker & McKenzie LLP (bakermckenzie.com) leads at 83% overall; Koil Energy Solutions, Inc. (peoplesenergy.co.uk) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Koil Energy Solutions, Inc. | peoplesenergy.co.uk | 23% | 0% | 15% | 37% | Weakest |
| Revolve Group, Inc. | revolve.com | 58% | 75% | 15% | 40% | Average |
| Marathon Health | marathonhealth.com.au | 49% | 50% | 15% | 45% | Below Average |
| Hippo Analytics Inc. | hippoanalytics.com | 47% | 50% | 15% | 37% | Below Average |
| HCA Healthcare, Inc. | airtificial.com | 68% | 95% | 50% | 42% | Above Average |
| The Krum Public Library | krumlibrary.org | 48% | 50% | 15% | 40% | Below Average |
| Troutman Pepper Locke LLP | troutman.com | 69% | 65% | 15% | 92% | Above Average |
| Del Monte Foods Corporation II Inc. | delmontefoods.com | 64% | 90% | 15% | 40% | Above Average |
| Blossom BH Opco Inc. | blossom.com | 35% | 0% | 15% | 65% | Weak |
| Trimera Health | trimerahealth.net | 28% | 0% | 15% | 40% | Weakest |
| Metro Tulsa Foot & Ankle Specialist | tulsafoot.com | 25% | 0% | 15% | 43% | Weakest |
| Granbury ISD | granburyisd.org | 53% | 25% | 15% | 90% | Average |
| The Vant Group, Inc. | vant.com | 42% | 35% | 15% | 40% | Below Average |
| American Campus Communities LLC | americancampus.com | 63% | 50% | 15% | 92% | Above Average |
| Baker & McKenzie LLP | bakermckenzie.com | 83% | 90% | 45% | 98% | Good |
| Directed Trust Company | directedtrust.com | 64% | 90% | 15% | 40% | Above Average |
Audit links: peoplesenergy.co.uk · revolve.com · marathonhealth.com.au · hippoanalytics.com · airtificial.com · krumlibrary.org · troutman.com · delmontefoods.com · blossom.com · trimerahealth.net · tulsafoot.com · granburyisd.org · vant.com · americancampus.com · bakermckenzie.com · directedtrust.com
Website stack note
- HCA Healthcare, Inc. (
airtificial.com): WordPress behind current (running 3.15.0; latest 7.1.4); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly. - Marathon Health (
marathonhealth.com.au): WordPress behind current (running 3.7.1; latest 7.1.4); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly.
Related trackers
- Texas OAG YTD dashboard
- Government & education tracker
- Monitoring guide
- All state AG trackers
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA October roundup
- TX October roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP October roundup
- Breach data week (November)
- HHS OCR October roundup
- SEC 8-K October roundup
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR