This is EmailMeNow’s multi-source breach data week snapshot for September 27, 2026, covering Texas OAG, California AG, Washington AG, Have I Been Pwned, HHS OCR, and SEC Form 8-K cyber filings. Figures come from our committed datasets after the weekly refresh — not a single regulator feed.

Illustration: multi-source breach data week covering state AG, HIBP, SEC, and HHS trackers for September 27, 2026

Current YTD snapshot

Source	Metric	Value
Texas OAG	YTD reports	493
Texas OAG	Texans affected	32,433,280
HHS OCR	2026 submissions	373
HHS OCR	Individuals (2026)	66,415,852
SEC Form 8-K	Item 1.05 families YTD	21
SEC Form 8-K	Item 1.05 raw filings YTD	26
SEC Form 8-K	Cyber-related 8-Ks tracked	48
California AG	YTD notices	412
Washington AG	YTD reports	50
Washington AG	Washingtonians affected	428,130
Have I Been Pwned	2026 listings	83
Have I Been Pwned	Accounts (2026 listings)	294,106,303

Week-over-week changes

Compared with the prior weekly alert baseline:

Texas YTD reports +26 (467 → 493)
Texas YTD affected +278,669 (32,154,611 → 32,433,280)
HHS 2026 submissions +18 (355 → 373)
HHS 2026 individuals +400,965 (66,014,887 → 66,415,852)
SEC 8-K Item 1.05 families YTD +1 (20 → 21)

Source roundups this week

Source-specific detail pages for this week’s new listings. This digest is the multi-source hub (YTD totals + companies); open a roundup below for that source’s table and audits.

Source	Roundup	Tracker
Texas OAG	September 25, 2026	Open tracker
California AG	September 24, 2026	Open tracker
SEC Form 8-K	September 23, 2026	Open tracker

Companies added this week

Entities newly listed in source roundups through September 27, 2026 (17 shown; 17 with a researched domain). Domain audit scores for scored filers follow in Independent Cybersecurity Audits.

Organization	Source	Domain
AngMar Management Services	Texas OAG	`angmar.com`
Ridgeway Pharmacy Ltd	Texas OAG	`ridgeway.pharmacy`
OneMain Financial Group, LLC	Texas OAG	`onemainfinancial.com`
Corpay, Inc.	Texas OAG	`corpayone.com`
CITGO Petroleum Corporation	Texas OAG	`citgo.com`
Fairwinds Credit Union	Texas OAG	`fairwinds.org`
Gallagher Transport International Inc.	Texas OAG	`gallaghertransport.com`
Structural and Steel Products	Texas OAG	`s-steel.com`
HarbisonWalker International, Inc.	Texas OAG	`harbisonwalker.com`
Fun For Less Tours, Inc.	Texas OAG	`funforlesstours.com`
United Underwriters	Texas OAG	`usfca.edu`
5Star Life Insurance Company	California AG	`5starlifeinsurance.com`
Blanchard Training & Development, Inc.	California AG	`blanchard.com`
HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”)	California AG	`hilt.com`
NSE Insurance Agencies	California AG	`nseinsurance.com`
Peña and Bromberg	California AG	`penabromberg.com`
Astrana Health, Inc.	SEC Form 8-K	`astranahealth.com`

Independent Cybersecurity Audits

EmailMeNow domain audits on September 27, 2026 scored 16 filer domains in this batch. 14 of 16 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver. Fairwinds Credit Union (fairwinds.org) leads at 79% overall; HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”) (hilt.com) scores 23%.

Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.

Organization	Domain	Overall	Identity	Transport	Website	Risk
AngMar Management Services	angmar.com	27%	0%	15%	37%	Weakest
Ridgeway Pharmacy Ltd	ridgeway.pharmacy	23%	0%	15%	37%	Weakest
OneMain Financial Group, LLC	onemainfinancial.com	64%	90%	15%	42%	Above Average
Corpay, Inc.	corpayone.com	75%	75%	45%	92%	Good
CITGO Petroleum Corporation	citgo.com	69%	65%	15%	90%	Above Average
Fairwinds Credit Union	fairwinds.org	79%	90%	15%	90%	Good
Gallagher Transport International Inc.	gallaghertransport.com	48%	50%	15%	40%	Below Average
Structural and Steel Products	s-steel.com	48%	50%	15%	40%	Below Average
HarbisonWalker International, Inc.	harbisonwalker.com	32%	10%	15%	40%	Weak
Fun For Less Tours, Inc.	funforlesstours.com	27%	0%	15%	37%	Weakest
United Underwriters	usfca.edu	53%	25%	45%	87%	Average
5Star Life Insurance Company	5starlifeinsurance.com	57%	35%	15%	92%	Average
Blanchard Training & Development, Inc.	blanchard.com	45%	20%	15%	70%	Below Average
HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”)	hilt.com	23%	0%	15%	37%	Weakest
NSE Insurance Agencies	nseinsurance.com	73%	75%	15%	92%	Good
Peña and Bromberg	penabromberg.com	24%	0%	15%	40%	Weakest

Audit links: angmar.com · ridgeway.pharmacy · onemainfinancial.com · corpayone.com · citgo.com · fairwinds.org · gallaghertransport.com · s-steel.com · harbisonwalker.com · funforlesstours.com · usfca.edu · 5starlifeinsurance.com · blanchard.com · hilt.com · nseinsurance.com · penabromberg.com

Website stack note

5Star Life Insurance Company (5starlifeinsurance.com): WordPress behind current (running 3.7.1; latest 7.1.2); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly.
Gallagher Transport International Inc. (gallaghertransport.com): PHP outdated/unsupported (8.1.34 — no vendor security patches); WordPress behind current (running .; latest 7.1.2); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly.
HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”) (hilt.com): Bootstrap: Bootstrap 3/4 are past primary vendor support; upgrade to Bootstrap 5 when practical (often theme-bundled).
United Underwriters (usfca.edu): Drupal major version behind (reports 10; current major is 11.4.8)

Sources: Texas OAG · California AG · Washington AG · Have I Been Pwned · HHS OCR · SEC EDGAR

Breach Data Week of September 27, 2026: Texas, HIBP, SEC & HHS Updates