News
Page 6 of 31 — 923 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the Full Audit Report with Fix Kit steps and compliance evidence for $99.
Texas OAG published 13 new data security breach reports on August 21, 2026, affecting 136,398 Texans. Wilmer Cutler Pickering Hale and Dorr LLP led the batch with 80,528 affected.
Read Update
FBI PSA 2026-08-10: phishing lookalike domains and fake support texts steal MFA codes to take over social accounts. Audits (ideal 100%): ic3.gov 87%, instagram.com 80%, google.com 55%. Instagram MFA Pass; Facebook Strong.
Read Update
Group-IB: SpyNote RAT plus WindRelay NFC relay in a live bank-impersonation call. Sideload is the install. Audits (ideal 100%): chase.com 79%, malwarebytes.com 71%, bankofamerica.com 53%. YubiKey does not stop a RATted phone.
Read Update
Multi-source breach data week of August 16, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +22 (382 → 404). 21 companies/entities from source roundups.
Read Update
Fort Worth’s JPS Health Network isolated systems Aug 3 after suspicious activity. EHR returned Aug 15; MyChart stayed down. Audits (ideal 100%): jpshealthnet.org 33% (Identity 0%); jpshealth.org 58%. MyChart MFA: SMS/email OTP, passkeys on login, no documented YubiKey.
Read Update
California's data breach list added 5 notices on August 14, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Delta Flight 591 (LAS–ATL, Aug 10) carried a rogue “Delta WiFi Fast” network after DEF CON 34. Delta says aircraft systems were not hacked. Domain audits (ideal 100%): defcon.org 79%; viasat.com 77%; delta.com 70%; google.com 52% — none at 100%. SkyMiles MFA: SMS/email OTP, no YubiKey or Google Authenticator.
Read Update
HHS OCR listed 5 large HIPAA breach submissions dated August 14, 2026, affecting 2,823,765 individuals nationally. Baylor Genetics led the batch with 2,810,878 individuals.
Read Update
Texas OAG published 15 new data security breach reports on August 14, 2026, affecting 1,214,857 Texans. Heights Finance Holdings Co. led the batch with 734,828 affected.
Read Update
Washington's Attorney General published 4 new data breach notifications on August 14, 2026, affecting 76,323 Washingtonians. Paylogix, LLC led the batch with 28,449 affected.
Read Update
Have I Been Pwned added 1 breach on August 13, 2026, exposing 1,596,490 accounts globally. RingCentral led the batch with 1,596,490 accounts.
Read Update
Multi-source breach data week of August 9, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +12 (370 → 382). 10 companies/entities from source roundups.
Read Update
Have I Been Pwned added 1 breach on August 9, 2026, exposing 218,395 accounts globally. Alcon led the batch with 218,395 accounts.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed August 7, 2026. Alto Ingredients, Inc. is among the filers.
Read Update
Texas OAG published 6 new data security breach reports on August 7, 2026, affecting 6,806 Texans. RUS Industrial, LLC led the batch with 4,343 affected.
Read Update
California's data breach list added 3 notices on August 5, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Complaints allege a Dec 2025 Call-on-Doc breach with ~1.14M patient records sold on a dark-web forum. In Re 3:26-cv-00200 (N.D. Tex). Org notice not found. Audit: callondoc.com 48%.
Read Update
Marquis Software Solutions (Plano) reported an Aug 14, 2025 ransomware incident affecting 354,289 Texans via bank/CU customer data. E.D. Tex In Re 4:25-cv-01277. Audit: gomarquis.com 61%.
Read Update
Parexel International notified employees after an Oct 4, 2025 Oracle OCI E-Business Suite zero-day. Texas OAG lists 1,203 Texans. Neville v. Parexel consolidated into W.D. Tex Oracle MDL. Audit: parexel.com 54%.
Read Update
Complaints allege The Gentlemen hit Houston PsychPlus in April 2026 and exfiltrated patient PII/PHI. Lead docket Dickerson 4:26-cv-03068. No org/OCR notice found. Audit: psychplus.com 56%.
Read Update
Houston medical biller Resource Corporation of America confirmed Dec 2025 unauthorized access and filed with HHS OCR (501 individuals — often a placeholder). Audit: resource-corp.com 47%.
Read Update
ShinyHunters released ZenBusiness CRM data after a March 2026 extortion claim. HIBP lists 5,118,184 accounts. W.D. Tex In Re 1:26-cv-00812. Audit: zenbusiness.com 66% (ideal 100%).
Read Update
Earthbound Holding LLC (Earthbound Trading) reported 1,866 Texans affected after a Dec 2025 network incident exposing employee SSNs. N.D. Tex In Re litigation; audits score earthboundtrading.com at 73%.
Read Update
CHCP (Empowerment Schools / Texas Medical Careers) reported 68,927 Texans affected after an Aug 2025 network intrusion. S.D. Tex lawsuits and audits score chcp.edu at 60% with 15% transport.
Read Update
Gulshan Management Services reported 128,652 Texans affected after a Sept 2025 phishing-led Qilin ransomware incident. S.D. Tex In Re litigation and audits score gulshanenterprises.com at 43%.
Read Update
IBM/Ponemon Cost of a Data Breach Report 2026: global average $4.99M (+12%), US $11.5M; phishing still the top vector; AI-driven attacks +56% with deepfakes leading. Domain audits (ideal 100%): hhs.gov 71%; ibm.com 70%; frostbank.com 68% — none at 100%.
Read Update
Master Mobilelink / Mobily (Mobilelink) reported 12,201 Texans affected after a late-2025 incident. Consolidated S.D. Tex suits under 4:26-cv-02565; audits score mobilelinkusa.com at 84% with 15% transport.
Read Update
CourtListener Batch A Texas data-breach defendants ranked by domain audit (ideal 100%): Mobilelink 84%, Earthbound 73%, CHCP 60%, Gulshan 43%. All show 15% transport; lookalikes and MFA gaps called out.
Read Update
Multi-source breach data week of August 2, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +18 (352 → 370). 11 companies/entities from source roundups.
Read Update
ExfilSquad posted ~14 high-profile victims on July 26, 2026 — including Microsoft (~8M), Zenith Bank (~90M), and City of Houston (~6M). Researchers call evidence thin. Domain audits (ideal 100%): none at 100%; flyfrontier.com 74%; dcps.dc.gov 30%.
Read Update