Banks, credit unions, mortgage lenders, and wealth advisors appear regularly in state Attorney General breach filings. Texas and Washington both publish residents-affected counts, making it possible to compare financial-sector exposure side by side.
Texas Financial Services Breaches (2026)
Interactive Tracker
Texas Financial Services Breaches: 2026 OAG Reports
Texans affected by 2026 breach notices from banks, credit unions, and financial firms, by month
Show largest 2026 financial-services breach reports
| Entity | Published | Texans affected | Sector |
|---|---|---|---|
| DriveWealth | Oct 2, 2026 | 2,556,688 | Financial |
| Heights Finance Holdings Co. | Aug 14, 2026 | 734,828 | Financial |
| AssuranceAmerica Managing General Agency, LLC | Jun 26, 2026 | 500,987 | Financial |
| Motility Software Solutions | Oct 23, 2026 | 194,755 | Financial |
| Frost Bank | May 20, 2026 | 191,848 | Financial |
Source: Texas Attorney General - Data Security Breach Reports, industry-filtered. Data current through Nov 6, 2026.
Sources
State AG breach portals
State AG reporting & notices
Federal registries
Notable Texas Financial Institutions
| Institution | Texans Affected | Date Published |
|---|---|---|
| DriveWealth | 2,556,688 | Oct 2, 2026 |
| Heights Finance Holdings Co. | 734,828 | Aug 14, 2026 |
| AssuranceAmerica Managing General Agency, LLC | 500,987 | Jun 26, 2026 |
| Motility Software Solutions | 194,755 | Oct 23, 2026 |
| Frost Bank | 191,848 | May 20, 2026 |
Newly listed in Texas (last 3 weeks)
| Institution | Texans Affected | Date Published |
|---|---|---|
| Insight Credit Union | 656 | Nov 6, 2026 |
| Texas Mutual Insurance Company | 1,890 | Nov 3, 2026 |
| Revolve Group, Inc. | 127,200 | Oct 30, 2026 |
| The Krum Public Library | 14,828 | Oct 30, 2026 |
| The Vant Group, Inc. | 286 | Oct 30, 2026 |
| Directed Trust Company | 1,346 | Oct 28, 2026 |
| USForex INC. | 1,058 | Oct 28, 2026 |
| Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”) | 687 | Oct 28, 2026 |
See also our Texas banks and credit unions OAG coverage, MemberSource breach write-up, and the dedicated Heights Finance cloud-incident post.
Washington Financial Services Breaches (2026)
Interactive Tracker
Washington Financial Services Breaches: 2026 AG Reports
Washingtonians affected by 2026 breach notices from banks, credit unions, and financial firms, by month
Show largest 2026 Washington financial-services breach reports
| Entity | Published | Washingtonians affected | Sector |
|---|---|---|---|
| DriveWealth, LLC | Oct 13, 2026 | 358,104 | Financial |
| Poppins Payroll Company | Sep 29, 2026 | 17,954 | Financial |
| Lennar Mortgage, LLC | Aug 14, 2026 | 11,417 | Healthcare / Medical |
| JRK Property Holdings, Inc. | Jul 27, 2026 | 5,667 | Financial |
| Catalyst Brands LLC | Sep 4, 2026 | 4,015 | Financial |
Source: Washington State Attorney General - Data Breach Notifications, industry-filtered. Data current through Nov 5, 2026.
Sources
State AG breach portals
Notable Washington Financial Institutions
| Institution | Washingtonians Affected | Date Published |
|---|---|---|
| DriveWealth, LLC | 358,104 | Oct 13, 2026 |
| Poppins Payroll Company | 17,954 | Sep 29, 2026 |
| Lennar Mortgage, LLC | 11,417 | Aug 14, 2026 |
| JRK Property Holdings, Inc. | 5,667 | Jul 27, 2026 |
| Catalyst Brands LLC | 4,015 | Sep 4, 2026 |
Newly listed in Washington (last 3 weeks)
| Institution | Washingtonians Affected | Date Published |
|---|---|---|
| Hands On Children’s Museum | 1,001 | Nov 5, 2026 |
California AG List (No Affected Counts)
California publishes incident names without resident totals. 9 likely credit-union entries were reported in 2026 through Sep 23, 2026:
- Fairwinds Credit Union — Sep 23, 2026
- Suffolk Federal Credit Union — Sep 11, 2026
- POLAM Federal Credit Union — Aug 21, 2026
- Educational Employees Credit Union — May 29, 2026
- MemberSource Credit Union — May 8, 2026
- Frontwave Credit Union — Apr 28, 2026
- Alaska Air Group Federal Credit Union — Apr 17, 2026
- Gain Federal Credit Union — Feb 4, 2026
- SAFE CREDIT UNION — Jan 13, 2026
Monitor the California AG breach list for other financial-sector names (lenders, insurers, and fintech) that are not credit unions.
Compliance Context
GLBA and the FTC Safeguards Rule require documented safeguards for customer nonpublic personal information. Weak email authentication enables impersonation, phishing, and fraudulent transfer requests — common precursors to breach notifications.
Check your institution’s posture at audit.emailmenow.com/?industry=financial-advisors.
Recommendations
- Enforce DMARC, strict SPF, and DKIM signing.
- Require MFA on email, wire-transfer, and core banking systems.
- Maintain a documented safeguards program with recurring security awareness training.
Related trackers
- Texas OAG YTD dashboard
- Healthcare AG breach tracker
- Government & education tracker
- Law firm breach tracker
- Hospitality & retail tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA October roundup
- TX October roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP October roundup
- Breach data week (November)
- HHS OCR October roundup
- SEC 8-K October roundup
- Monitoring guide
- All trackers