This is EmailMeNow’s multi-source breach data week snapshot for October 4, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.
Current YTD snapshot
| Source | Metric | Value |
|---|---|---|
| Texas OAG | YTD reports | 512 |
| Texas OAG | Texans affected | 35,444,753 |
| HHS OCR | 2026 submissions | 404 |
| HHS OCR | Individuals (2026) | 67,614,220 |
| SEC Form 8-K | Item 1.05 families YTD | 21 |
| SEC Form 8-K | Item 1.05 raw filings YTD | 26 |
| SEC Form 8-K | Cyber-related 8-Ks tracked | 48 |
| California AG | YTD notices | 432 |
| Washington AG | YTD reports | 50 |
| Washington AG | Washingtonians affected | 428,702 |
| Have I Been Pwned | 2026 listings | 84 |
| Have I Been Pwned | Accounts (2026 listings) | 294,530,250 |
Week-over-week changes
Compared with the prior weekly alert baseline:
- Texas YTD reports +19 (493 → 512)
- Texas YTD affected +3,011,473 (32,433,280 → 35,444,753)
- HHS 2026 submissions +31 (373 → 404)
- HHS 2026 individuals +1,198,368 (66,415,852 → 67,614,220)
Source roundups this week
Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.
| Source | Roundup | Tracker |
|---|---|---|
| Texas OAG | October 2, 2026 | Open tracker |
| California AG | October 1, 2026 | Open tracker |
| Have I Been Pwned | September 30, 2026 | Open tracker |
Companies added this week
Entities newly listed in source roundups through October 4, 2026 (23 shown; 21 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.
| Organization | Source | Domain |
|---|---|---|
| Cerner Corporation | Texas OAG | cerner.com |
| DriveWealth | Texas OAG | drivewealth.com |
| World Acceptance Corporation | Texas OAG | worldacceptance.com |
| Poppins Payroll Company | Texas OAG | poppinspayroll.com |
| Lincoln Property Company Commercial LLC | Texas OAG | lincolnpropertycompany.co.uk |
| Upbound Group, Inc. | Texas OAG | upbound.io |
| Pro Holdings, LLC d/b/a ProCamps | Texas OAG | procamps.com |
| 7 to 7 Dental & Orthodontics | Texas OAG | dentalorthodontics.com |
| Midvale Indemnity Company | Texas OAG | midvale.com |
| Little River Memorial Hospital | Texas OAG | little.com |
| The Woodlands Arts Council | Texas OAG | thewoodlandsartscouncil.org |
| PSI Premier Specialties Inc. d/b/a Medical Express PSI | Texas OAG | — |
| Greenberg Traurig, LLP (“GT”) | Texas OAG | greenbergtraurig.com |
| Innovative Alternatives, Inc | Texas OAG | innovativealternatives.org |
| Walnut Creek Special Utility District | Texas OAG | walnutcreeksud.org |
| i.e.Smart Systems, LLC | Texas OAG | iesmartsystems.com |
| Goldston Oil Corporation | Texas OAG | goldstonoil.com |
| City of McMinnville | Texas OAG | — |
| Aldrich Services LLP | California AG | aldrichco.com |
| Greenberg Traurig, LLP (“GT”) | California AG | greenbergtraurig.com |
| Lincoln Property Company Commercial LLC | California AG | lincolnpropertycompany.co.uk |
| Marana Health Center | California AG | maranahealth.com |
| Medela | Have I Been Pwned | medela.com |
Independent Cybersecurity Audits
EmailMeNow domain audits on October 4, 2026 scored 16 filer domains in this batch.
15 of 16 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
DriveWealth (drivewealth.com) leads at 65% overall; Goldston Oil Corporation (goldstonoil.com) scores 31%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Cerner Corporation | cerner.com | 64% | 90% | 15% | 40% | Above Average |
| DriveWealth | drivewealth.com | 65% | 65% | 50% | 70% | Above Average |
| World Acceptance Corporation | worldacceptance.com | 57% | 40% | 15% | 84% | Average |
| Poppins Payroll Company | poppinspayroll.com | 51% | 25% | 15% | 84% | Average |
| Lincoln Property Company Commercial LLC | lincolnpropertycompany.co.uk | 37% | 25% | 15% | 37% | Weak |
| Upbound Group, Inc. | upbound.io | 54% | 65% | 15% | 40% | Average |
| Pro Holdings, LLC d/b/a ProCamps | procamps.com | 61% | 65% | 15% | 65% | Above Average |
| 7 to 7 Dental & Orthodontics | dentalorthodontics.com | 43% | 50% | 15% | 37% | Below Average |
| Midvale Indemnity Company | midvale.com | 38% | 25% | 15% | 40% | Weak |
| Little River Memorial Hospital | little.com | 48% | 50% | 15% | 40% | Below Average |
| The Woodlands Arts Council | thewoodlandsartscouncil.org | 62% | 50% | 15% | 87% | Above Average |
| Greenberg Traurig, LLP (“GT”) | greenbergtraurig.com | 49% | 65% | 15% | 37% | Below Average |
| Innovative Alternatives, Inc | innovativealternatives.org | 51% | 60% | 15% | 39% | Average |
| Walnut Creek Special Utility District | walnutcreeksud.org | 33% | 10% | 15% | 45% | Weak |
| i.e.Smart Systems, LLC | iesmartsystems.com | 55% | 70% | 15% | 37% | Average |
| Goldston Oil Corporation | goldstonoil.com | 31% | 10% | 15% | 37% | Weak |
Audit links: cerner.com · drivewealth.com · worldacceptance.com · poppinspayroll.com · lincolnpropertycompany.co.uk · upbound.io · procamps.com · dentalorthodontics.com · midvale.com · little.com · thewoodlandsartscouncil.org · greenbergtraurig.com · innovativealternatives.org · walnutcreeksud.org · iesmartsystems.com · goldstonoil.com
Website stack note
- The Woodlands Arts Council (
thewoodlandsartscouncil.org):
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- Have I Been Pwned 2026 tracker
- SEC Form 8-K Item 1.05 cyber disclosures YTD 2026
- HIPAA / HHS OCR statistics
- Breach monitoring guide
Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR