Banks, credit unions, mortgage lenders, and wealth advisors appear regularly in state Attorney General breach filings. Texas and Washington both publish residents-affected counts, making it possible to compare financial-sector exposure side by side.
Texas Financial Services Breaches (2026)
Interactive Tracker
Texas Financial Services Breaches: 2026 OAG Reports
Texans affected by 2026 breach notices from banks, credit unions, and financial firms, by month
Show largest 2026 financial-services breach reports
| Entity | Published | Texans affected | Sector |
|---|---|---|---|
| DriveWealth | Oct 2, 2026 | 2,556,688 | Financial |
| Heights Finance Holdings Co. | Aug 14, 2026 | 734,828 | Financial |
| AssuranceAmerica Managing General Agency, LLC | Jun 26, 2026 | 500,987 | Financial |
| Frost Bank | May 20, 2026 | 191,848 | Financial |
| Gulshan Management Services, Inc. | Mar 16, 2026 | 128,652 | Financial |
Source: Texas Attorney General - Data Security Breach Reports, industry-filtered. Data current through Oct 2, 2026.
Sources
State AG breach portals
State AG reporting & notices
Federal registries
Notable Texas Financial Institutions
| Institution | Texans Affected | Date Published |
|---|---|---|
| DriveWealth | 2,556,688 | Oct 2, 2026 |
| Heights Finance Holdings Co. | 734,828 | Aug 14, 2026 |
| AssuranceAmerica Managing General Agency, LLC | 500,987 | Jun 26, 2026 |
| Frost Bank | 191,848 | May 20, 2026 |
| Gulshan Management Services, Inc. | 128,652 | Mar 16, 2026 |
Newly listed in Texas (last 3 weeks)
| Institution | Texans Affected | Date Published |
|---|---|---|
| Poppins Payroll Company | 23,796 | Oct 2, 2026 |
| Upbound Group, Inc. | 6,280 | Oct 2, 2026 |
| The Woodlands Arts Council | 2,250 | Oct 2, 2026 |
| Borger Independent School District | 4,232 | Sep 29, 2026 |
| CAZ Investments LP | 3,824 | Sep 29, 2026 |
| Ozark Interests, Inc. | 564 | Sep 29, 2026 |
| Texas Mutual Insurance Company | 265 | Sep 29, 2026 |
| OneMain Financial Group, LLC | 15,472 | Sep 25, 2026 |
See also our Texas banks and credit unions OAG coverage, MemberSource breach write-up, and the dedicated Heights Finance cloud-incident post.
Washington Financial Services Breaches (2026)
Interactive Tracker
Washington Financial Services Breaches: 2026 AG Reports
Washingtonians affected by 2026 breach notices from banks, credit unions, and financial firms, by month
Show largest 2026 Washington financial-services breach reports
| Entity | Published | Washingtonians affected | Sector |
|---|---|---|---|
| Lennar Mortgage, LLC | Aug 14, 2026 | 11,417 | Healthcare / Medical |
| JRK Property Holdings, Inc. | Jul 27, 2026 | 5,667 | Financial |
| Catalyst Brands LLC | Sep 4, 2026 | 4,015 | Financial |
| Turner Construction Company | Aug 18, 2026 | 3,401 | Financial |
| ASOS US Sales LLC | Aug 21, 2026 | 1,929 | Financial |
Source: Washington State Attorney General - Data Breach Notifications, industry-filtered. Data current through Sep 4, 2026.
Sources
State AG breach portals
Notable Washington Financial Institutions
| Institution | Washingtonians Affected | Date Published |
|---|---|---|
| Lennar Mortgage, LLC | 11,417 | Aug 14, 2026 |
| JRK Property Holdings, Inc. | 5,667 | Jul 27, 2026 |
| Catalyst Brands LLC | 4,015 | Sep 4, 2026 |
| Turner Construction Company | 3,401 | Aug 18, 2026 |
| ASOS US Sales LLC | 1,929 | Aug 21, 2026 |
Newly listed in Washington (last 3 weeks)
| Institution | Washingtonians Affected | Date Published |
|---|---|---|
| Bimbo Bakeries USA (Oracle) | 786 | Sep 4, 2026 |
| Greystar Real Estate Partners, LLC | 905 | Aug 27, 2026 |
California AG List (No Affected Counts)
California publishes incident names without resident totals. 9 likely credit-union entries were reported in 2026 through Sep 23, 2026:
- Fairwinds Credit Union — Sep 23, 2026
- Suffolk Federal Credit Union — Sep 11, 2026
- POLAM Federal Credit Union — Aug 21, 2026
- Educational Employees Credit Union — May 29, 2026
- MemberSource Credit Union — May 8, 2026
- Frontwave Credit Union — Apr 28, 2026
- Alaska Air Group Federal Credit Union — Apr 17, 2026
- Gain Federal Credit Union — Feb 4, 2026
- SAFE CREDIT UNION — Jan 13, 2026
Monitor the California AG breach list for other financial-sector names (lenders, insurers, and fintech) that are not credit unions.
Compliance Context
GLBA and the FTC Safeguards Rule require documented safeguards for customer nonpublic personal information. Weak email authentication enables impersonation, phishing, and fraudulent transfer requests — common precursors to breach notifications.
Check your institution’s posture at audit.emailmenow.com/?industry=financial-advisors.
Recommendations
- Enforce DMARC, strict SPF, and DKIM signing.
- Require MFA on email, wire-transfer, and core banking systems.
- Maintain a documented safeguards program with recurring security awareness training.
Related trackers
- Texas OAG YTD dashboard
- Healthcare AG breach tracker
- Government & education tracker
- Law firm breach tracker
- Hospitality & retail tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR September roundup
- SEC 8-K September roundup
- Monitoring guide
- All trackers