This is EmailMeNow’s multi-source breach data week snapshot for August 16, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.
Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 404 |
| Texas OAG | Texans affected | 31,105,153 |
| HHS OCR | 2026 submissions | 274 |
| HHS OCR | Individuals (2026) | 44,604,319 |
| SEC Form 8-K | Item 1.05 families YTD | 17 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 22 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 38 |
| California AG | YTD notices | 345 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 493,551 |
| Have I Been Pwned | 2026 listings | 75 |
| Have I Been Pwned | Accounts (2026 listings) | 257,337,649 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +22 (382 → 404)
- Texas YTD affected +1,319,715 (29,785,438 → 31,105,153)
- HHS 2026 submissions +11 (263 → 274)
- HHS 2026 individuals +15,544,129 (29,060,190 → 44,604,319)
- SEC 8-K Item 1.05 families YTD +2 (15 → 17)
Source roundups this week
Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.
| Source | Roundup | Tracker |
|---|---|---|
| California AG | August 14, 2026 | Open tracker |
| Texas OAG | August 14, 2026 | Open tracker |
| Have I Been Pwned | August 13, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through August 16, 2026 (21 shown; 18 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| AdaptHealth, LLC | California AG | adapthealth.com |
| Baylor Genetics | California AG | baylorgenetics.com |
| Lennar Mortgage, LLC | California AG | lennarmortgage.com |
| Paylogix, LLC | California AG | paylogix.com |
| Quantum Health, Inc. | California AG | quantumhealth.com |
| Heights Finance Holdings Co. | Texas OAG | heightsfinance.com |
| Lone Star Community Health Center | Texas OAG | lone.com |
| AdaptHealth, LLC | Texas OAG | adapthealth.com |
| Lennar Mortgage, LLC | Texas OAG | lennarmortgage.com |
| USA DeBusk LLC | Texas OAG | debuskfoundation.org |
| Universal Plant Services, LLC | Texas OAG | universalplant.com |
| Kovack Financial, LLC | Texas OAG | kovackfinancial.com |
| The Law Office of Douglas D. Ketterman, P.L.L.C. | Texas OAG | — |
| Corporation Service Company | Texas OAG | — |
| Tange, Mann & Garza, P.C. | Texas OAG | tange.org |
| Lennar Corporation | Texas OAG | lennarmortgage.com |
| The Methodist Hospital d/b/a Houston Methodist Hospital | Texas OAG | methodisthospital.net |
| Terry J. Dubrow, MD, A Medical Corporation | Texas OAG | terry.com |
| Bahrie Law, PLLC | Texas OAG | — |
| North Florida Women’s Care | Texas OAG | floridawomencare.com |
| RingCentral | Have I Been Pwned | ringcentral.com |
Independent Cybersecurity Audits
EmailMeNow domain audits on August 16, 2026 scored 15 filer domains in this batch.
15 of 15 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
RingCentral (ringcentral.com) leads at 78% overall; The Methodist Hospital d/b/a Houston Methodist Hospital (methodisthospital.net) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| AdaptHealth, LLC | adapthealth.com | 73% | 65% | 15% | 87% | Good |
| Baylor Genetics | baylorgenetics.com | 47% | 50% | 15% | 39% | Below Average |
| Lennar Mortgage, LLC | lennarmortgage.com | 53% | 65% | 15% | 37% | Average |
| Paylogix, LLC | paylogix.com | 47% | 50% | 15% | 37% | Below Average |
| Quantum Health, Inc. | quantumhealth.com | 63% | 50% | 15% | 92% | Above Average |
| Heights Finance Holdings Co. | heightsfinance.com | 55% | 70% | 15% | 37% | Average |
| Lone Star Community Health Center | lone.com | 60% | 80% | 15% | 40% | Above Average |
| USA DeBusk LLC | debuskfoundation.org | 44% | 25% | 15% | 62% | Below Average |
| Universal Plant Services, LLC | universalplant.com | 54% | 50% | 15% | 45% | Average |
| Kovack Financial, LLC | kovackfinancial.com | 23% | 0% | 15% | 37% | Weakest |
| Tange, Mann & Garza, P.C. | tange.org | 28% | 0% | 15% | 40% | Weakest |
| The Methodist Hospital d/b/a Houston Methodist Hospital | methodisthospital.net | 23% | 0% | 15% | 37% | Weakest |
| Terry J. Dubrow, MD, A Medical Corporation | terry.com | 47% | 50% | 15% | 37% | Below Average |
| North Florida Women’s Care | floridawomencare.com | 41% | 35% | 15% | 37% | Below Average |
| RingCentral | ringcentral.com | 78% | 90% | 15% | 87% | Good |
Audit links: adapthealth.com · baylorgenetics.com · lennarmortgage.com · paylogix.com · quantumhealth.com · heightsfinance.com · lone.com · debuskfoundation.org · universalplant.com · kovackfinancial.com · tange.org · methodisthospital.net · terry.com · floridawomencare.com · ringcentral.com
Website stack note
- Baylor Genetics (
baylorgenetics.com): WordPress behind current (running .; latest 7.0.4); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly. - Kovack Financial, LLC (
kovackfinancial.com): WordPress behind current (running 3.7.1; latest 7.0.4); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly.
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- Have I Been Pwned 2026 tracker
- SEC Form 8-K Item 1.05 cyber disclosures YTD 2026
- HIPAA / HHS OCR statistics
- Breach monitoring guide
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR