This is EmailMeNow’s multi-source breach data week snapshot for October 25, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.
Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 556 |
| Texas OAG | Texans affected | 37,370,138 |
| HHS OCR | 2026 submissions | 408 |
| HHS OCR | Individuals (2026) | 69,214,386 |
| SEC Form 8-K | Item 1.05 families YTD | 22 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 27 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 51 |
| California AG | YTD notices | 465 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 517,210 |
| Have I Been Pwned | 2026 listings | 90 |
| Have I Been Pwned | Accounts (2026 listings) | 296,610,262 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +13 (543 → 556)
- Texas YTD affected +250,457 (37,119,681 → 37,370,138)
- HHS 2026 submissions +22 (386 → 408)
- HHS 2026 individuals +2,148,305 (67,066,081 → 69,214,386)
Source roundups this week
Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.
| Source | Roundup | Tracker |
|---|---|---|
| Texas OAG | October 23, 2026 | Open tracker |
| California AG | October 22, 2026 | Open tracker |
| Have I Been Pwned | October 18, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through October 25, 2026 (14 shown; 14 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| Motility Software Solutions | Texas OAG | motilitysoftwaresolutions.com |
| Networking Technology, Inc. | Texas OAG | rxnt.com |
| Opportune LLP | Texas OAG | opportune.com |
| Dorsata, Inc. | Texas OAG | dorsatahoney.com |
| Sherman Independent School District | Texas OAG | sd42.ca |
| Photon Health | Texas OAG | photon.health |
| Dill Dill Carr Stonbraker & Hutchings, P.C. | Texas OAG | dillanddill.com |
| East Chambers Independent School District (Breach was through Frontline Education) | Texas OAG | sd42.ca |
| Region 9 Education Service Center | Texas OAG | region.com |
| BASS Medical Group | California AG | bassmedicalgroup.com |
| Deposition Solutions, LLC (d/b/a Lexitas) | California AG | depositionsolutions.com |
| Dill Dill Carr Stonbraker & Hutchings, P.C. | California AG | dillanddill.com |
| Opportune LLP | California AG | opportune.com |
| Gîtes de France | Have I Been Pwned | gites-de-france.com |
Independent Cybersecurity Audits
EmailMeNow domain audits on October 25, 2026 scored 11 filer domains in this batch.
9 of 11 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
BASS Medical Group (bassmedicalgroup.com) leads at 71% overall; Region 9 Education Service Center (region.com) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Motility Software Solutions | motilitysoftwaresolutions.com | 59% | 90% | 15% | 37% | Average |
| Networking Technology, Inc. | rxnt.com | 64% | 90% | 45% | 37% | Above Average |
| Opportune LLP | opportune.com | 63% | 50% | 15% | 92% | Above Average |
| Dorsata, Inc. | dorsatahoney.com | 38% | 0% | 15% | 87% | Weak |
| Sherman Independent School District | sd42.ca | 63% | 90% | 15% | 39% | Above Average |
| Photon Health | photon.health | 54% | 65% | 45% | 37% | Average |
| Dill Dill Carr Stonbraker & Hutchings, P.C. | dillanddill.com | 47% | 50% | 15% | 37% | Below Average |
| Region 9 Education Service Center | region.com | 23% | 0% | 15% | 37% | Weakest |
| BASS Medical Group | bassmedicalgroup.com | 71% | 75% | 15% | 84% | Good |
| Deposition Solutions, LLC (d/b/a Lexitas) | depositionsolutions.com | 47% | 50% | 15% | 37% | Below Average |
| Gîtes de France | gites-de-france.com | 51% | 35% | 15% | 70% | Average |
Audit links: motilitysoftwaresolutions.com · rxnt.com · opportune.com · dorsatahoney.com · sd42.ca · photon.health · dillanddill.com · region.com · bassmedicalgroup.com · depositionsolutions.com · gites-de-france.com
Website stack note
- Region 9 Education Service Center (
region.com): Bootstrap: Bootstrap 3/4 are past primary vendor support; upgrade to Bootstrap 5 when practical (often theme-bundled).
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- Have I Been Pwned 2026 tracker
- SEC Form 8-K Item 1.05 cyber disclosures YTD 2026
- HIPAA / HHS OCR statistics
- Breach monitoring guide
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR