This is EmailMeNow’s multi-source breach data week snapshot for July 19, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.
Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 342 |
| Texas OAG | Texans affected | 28,872,163 |
| HHS OCR | 2026 submissions | 241 |
| HHS OCR | Individuals (2026) | 23,244,084 |
| SEC Form 8-K | Item 1.05 families YTD | 14 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 18 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 31 |
| California AG | YTD notices | 300 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 549,632 |
| Have I Been Pwned | 2026 listings | 68 |
| Have I Been Pwned | Accounts (2026 listings) | 241,759,960 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +15 (327 → 342)
- Texas YTD affected +4,010,539 (24,861,624 → 28,872,163)
- HHS 2026 submissions -6 (247 → 241)
- HHS 2026 individuals -57,814 (23,301,898 → 23,244,084)
- SEC 8-K Item 1.05 families YTD +9 (5 → 14)
Source roundups this week
| Source | Roundup | Tracker |
|---|---|---|
| Have I Been Pwned | July 19, 2026 | Open tracker |
| California AG | July 17, 2026 | Open tracker |
| SEC Form 8-K | July 17, 2026 | Open tracker |
| Texas OAG | July 17, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through July 19, 2026 (16 shown; 16 with a resolvable domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| Paidwork | Have I Been Pwned | paidwork.com |
| BAYADA Home Health Care, Inc. | California AG | bayada.com |
| Quontic Bank Acquisition Corp. | California AG | quontic.com |
| The Estée Lauder Companies | California AG | esteelauder.com |
| ZenPatient, Inc. | California AG | zenpatient.com |
| River Financial Corp | SEC Form 8-K | river.bank |
| CLOVER HEALTH INVESTMENTS, CORP. /DE | SEC Form 8-K | cloverhealth.com |
| DentaQuest, LLC | Texas OAG | dentaquest.com |
| Resource Center of Dallas, Inc. | Texas OAG | rcodallas.org |
| Suvida Healthcare, LLC | Texas OAG | suvida.com |
| YouLend US LLC | Texas OAG | youlend.com |
| TPIS Industrial Services, Inc. | Texas OAG | tpis.com |
| Cure Dental | Texas OAG | curedental.com |
| Ernst & Young LLP | Texas OAG | ey.com |
| Fox Rothschild LLP | Texas OAG | foxrothschild.com |
| Questo, Inc. | Texas OAG | questo.com |
Independent Cybersecurity Audits
EmailMeNow domain audits on July 19, 2026 scored 16 filer domains in this batch.
13 of 16 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Ernst & Young LLP (ey.com) leads at 84% overall; Cure Dental (curedental.com) scores 28%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Paidwork | paidwork.com | 67% | 60% | 15% | 92% | Above Average |
| BAYADA Home Health Care, Inc. | bayada.com | 57% | 25% | 15% | 87% | Average |
| Quontic Bank Acquisition Corp. | quontic.com | 68% | 90% | 15% | 40% | Above Average |
| The Estée Lauder Companies | esteelauder.com | 69% | 90% | 15% | 40% | Above Average |
| ZenPatient, Inc. | zenpatient.com | 42% | 25% | 15% | 37% | Below Average |
| River Financial Corp | river.bank | 70% | 90% | 45% | 40% | Good |
| CLOVER HEALTH INVESTMENTS, CORP. /DE | cloverhealth.com | 54% | 50% | 15% | 43% | Average |
| DentaQuest, LLC | dentaquest.com | 68% | 90% | 15% | 37% | Above Average |
| Resource Center of Dallas, Inc. | rcodallas.org | 29% | 0% | 15% | 40% | Weakest |
| Suvida Healthcare, LLC | suvida.com | 33% | 0% | 15% | 40% | Weak |
| YouLend US LLC | youlend.com | 83% | 90% | 40% | 84% | Good |
| TPIS Industrial Services, Inc. | tpis.com | 47% | 0% | 15% | 87% | Below Average |
| Cure Dental | curedental.com | 28% | 0% | 15% | 37% | Weakest |
| Ernst & Young LLP | ey.com | 84% | 90% | 45% | 87% | Good |
| Fox Rothschild LLP | foxrothschild.com | 78% | 75% | 15% | 92% | Good |
| Questo, Inc. | questo.com | 53% | 50% | 15% | 40% | Average |
Audit links: paidwork.com · bayada.com · quontic.com · esteelauder.com · zenpatient.com · river.bank · cloverhealth.com · dentaquest.com · rcodallas.org · suvida.com · youlend.com · tpis.com · curedental.com · ey.com · foxrothschild.com · questo.com
Related trackers
- Texas OAG YTD dashboard
- Government & education tracker
- Monitoring guide
- All state AG trackers
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA July roundup
- TX July roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP July roundup
- Breach data week (July)
- HHS OCR July roundup
- SEC 8-K July roundup
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR