This is EmailMeNow’s multi-source breach data week snapshot for August 9, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.
Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 382 |
| Texas OAG | Texans affected | 29,785,438 |
| HHS OCR | 2026 submissions | 263 |
| HHS OCR | Individuals (2026) | 29,060,190 |
| SEC Form 8-K | Item 1.05 families YTD | 15 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 20 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 36 |
| California AG | YTD notices | 330 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 666,121 |
| Have I Been Pwned | 2026 listings | 74 |
| Have I Been Pwned | Accounts (2026 listings) | 255,741,159 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +12 (370 → 382)
- Texas YTD affected +62,637 (29,722,801 → 29,785,438)
- HHS 2026 submissions +6 (257 → 263)
- HHS 2026 individuals +4,249,596 (24,810,594 → 29,060,190)
Source roundups this week
Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.
| Source | Roundup | Tracker |
|---|---|---|
| Have I Been Pwned | August 9, 2026 | Open tracker |
| Texas OAG | August 7, 2026 | Open tracker |
| California AG | August 5, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through August 9, 2026 (10 shown; 10 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| Alcon | Have I Been Pwned | alcon.com |
| RUS Industrial, LLC | Texas OAG | salamapharma.co.tz |
| Acumen Fiscal Agent | Texas OAG | acumenfiscalagent.com |
| Travis County WCID # 17 | Texas OAG | traviscountytx.gov |
| Plano Family Clinic | Texas OAG | planofamilyclinic.com |
| Deaconess Health System | Texas OAG | deaconess.com |
| VA Loan Lady | Texas OAG | loanlady.com |
| New York City Regional Center, LLC | California AG | yorkregional.com |
| Robert Arshagouni | California AG | robert.com |
| Station Casinos, LLC | California AG | stationcasinos.com |
Independent Cybersecurity Audits
EmailMeNow domain audits on August 9, 2026 scored 10 filer domains in this batch.
9 of 10 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Travis County WCID # 17 (traviscountytx.gov) leads at 62% overall; New York City Regional Center, LLC (yorkregional.com) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Alcon | alcon.com | 59% | 40% | 15% | 90% | Average |
| RUS Industrial, LLC | salamapharma.co.tz | 58% | 75% | 15% | 40% | Average |
| Acumen Fiscal Agent | acumenfiscalagent.com | 48% | 50% | 15% | 40% | Below Average |
| Travis County WCID # 17 | traviscountytx.gov | 62% | 50% | 15% | 87% | Above Average |
| Plano Family Clinic | planofamilyclinic.com | 28% | 0% | 15% | 40% | Weakest |
| Deaconess Health System | deaconess.com | 57% | 35% | 15% | 90% | Average |
| VA Loan Lady | loanlady.com | 24% | 0% | 15% | 40% | Weakest |
| New York City Regional Center, LLC | yorkregional.com | 23% | 0% | 15% | 37% | Weakest |
| Robert Arshagouni | robert.com | 29% | 0% | 45% | 39% | Weakest |
| Station Casinos, LLC | stationcasinos.com | 53% | 65% | 15% | 37% | Average |
Audit links: alcon.com · salamapharma.co.tz · acumenfiscalagent.com · traviscountytx.gov · planofamilyclinic.com · deaconess.com · loanlady.com · yorkregional.com · robert.com · stationcasinos.com
Website stack note
- VA Loan Lady (
loanlady.com): TLS certificate expires in -187 day(s) - Travis County WCID # 17 (
traviscountytx.gov): Bootstrap: Bootstrap 3/4 are past primary vendor support; upgrade to Bootstrap 5 when practical (often theme-bundled).
Related trackers
- Texas OAG YTD dashboard
- Government & education tracker
- Monitoring guide
- All state AG trackers
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA August roundup
- TX August roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP August roundup
- Breach data week (August)
- HHS OCR July roundup
- SEC 8-K July roundup
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR