This is EmailMeNow’s multi-source breach data week snapshot for August 30, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.

Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 426 |
| Texas OAG | Texans affected | 31,472,583 |
| HHS OCR | 2026 submissions | 294 |
| HHS OCR | Individuals (2026) | 48,516,226 |
| SEC Form 8-K | Item 1.05 families YTD | 17 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 22 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 40 |
| California AG | YTD notices | 364 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 570,121 |
| Have I Been Pwned | 2026 listings | 79 |
| Have I Been Pwned | Accounts (2026 listings) | 272,972,885 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +8 (418 → 426)
- Texas YTD affected +8,653 (31,463,930 → 31,472,583)
- HHS 2026 submissions +1 (293 → 294)
- HHS 2026 individuals -7,439 (48,523,665 → 48,516,226)
Source roundups this week
Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.
| Source | Roundup | Tracker |
|---|---|---|
| Texas OAG | August 28, 2026 | Open tracker |
| Have I Been Pwned | August 25, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through August 30, 2026 (7 shown; 7 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| Lovejoy Independent School District | Texas OAG | sd42.ca |
| Integrated Specialty Coverages, LLC (“ISC) | Texas OAG | integratedspecialtycoverages.com |
| Together Women’s Health LLC (Aesto) | Texas OAG | togetherwomenshealth.com |
| Central National Gottesman Inc. | Texas OAG | central.com |
| Iroquois Memorial Hospital | Texas OAG | iroquois.com |
| Healthfirst Bluegrass, Inc. | Texas OAG | healthfirstlex.com |
| Carhartt | Have I Been Pwned | carhartt.com |
Independent Cybersecurity Audits
EmailMeNow domain audits on August 30, 2026 scored 7 filer domains in this batch.
7 of 7 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Lovejoy Independent School District (sd42.ca) leads at 63% overall; Together Women’s Health LLC (Aesto) (togetherwomenshealth.com) scores 39%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Lovejoy Independent School District | sd42.ca | 63% | 90% | 15% | 39% | Above Average |
| Integrated Specialty Coverages, LLC (“ISC) | integratedspecialtycoverages.com | 47% | 50% | 15% | 37% | Below Average |
| Together Women’s Health LLC (Aesto) | togetherwomenshealth.com | 39% | 25% | 15% | 43% | Weak |
| Central National Gottesman Inc. | central.com | 53% | 65% | 15% | 37% | Average |
| Iroquois Memorial Hospital | iroquois.com | 47% | 50% | 15% | 37% | Below Average |
| Healthfirst Bluegrass, Inc. | healthfirstlex.com | 57% | 75% | 15% | 37% | Average |
| Carhartt | carhartt.com | 62% | 50% | 15% | 87% | Above Average |
Audit links: sd42.ca · integratedspecialtycoverages.com · togetherwomenshealth.com · central.com · iroquois.com · healthfirstlex.com · carhartt.com
Website stack note
- Iroquois Memorial Hospital (
iroquois.com): Bootstrap: Bootstrap 3/4 are past primary vendor support; upgrade to Bootstrap 5 when practical (often theme-bundled).
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- Have I Been Pwned 2026 tracker
- SEC Form 8-K Item 1.05 cyber disclosures YTD 2026
- HIPAA / HHS OCR statistics
- Breach monitoring guide
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR