Banks, credit unions, mortgage lenders, and wealth advisors appear regularly in state Attorney General breach filings. Texas and Washington both publish residents-affected counts, making it possible to compare financial-sector exposure side by side.
Texas Financial Services Breaches (2026)
Interactive Tracker
Texas Financial Services Breaches: 2026 OAG Reports
Texans affected by 2026 breach notices from banks, credit unions, and financial firms, by month
Show largest 2026 financial-services breach reports
| Entity | Published | Texans affected | Sector |
|---|---|---|---|
| Heights Finance Holdings Co. | Aug 14, 2026 | 734,828 | Financial |
| AssuranceAmerica Managing General Agency, LLC | Jun 26, 2026 | 500,987 | Financial |
| Frost Bank | May 20, 2026 | 191,848 | Financial |
| Gulshan Management Services, Inc. | Mar 16, 2026 | 128,652 | Financial |
| Texas Capital | May 29, 2026 | 86,067 | PII / Identity |
Source: Texas Attorney General - Data Security Breach Reports, industry-filtered. Data current through Aug 14, 2026.
Sources
State AG breach portals
State AG reporting & notices
Federal registries
Notable Texas Financial Institutions
| Institution | Texans Affected | Date Published |
|---|---|---|
| Heights Finance Holdings Co. | 734,828 | Aug 14, 2026 |
| AssuranceAmerica Managing General Agency, LLC | 500,987 | Jun 26, 2026 |
| Frost Bank | 191,848 | May 20, 2026 |
| Gulshan Management Services, Inc. | 128,652 | Mar 16, 2026 |
| Texas Capital | 86,067 | May 29, 2026 |
See also our Texas banks and credit unions OAG coverage and MemberSource breach write-up.
Washington Financial Services Breaches (2026)
Interactive Tracker
Washington Financial Services Breaches: 2026 AG Reports
Washingtonians affected by 2026 breach notices from banks, credit unions, and financial firms, by month
Show largest 2026 Washington financial-services breach reports
| Entity | Published | Washingtonians affected | Sector |
|---|---|---|---|
| Plaza Home Mortgage Inc. | Jun 5, 2026 | 9,598 | PII / Identity |
| JRK Property Holdings, Inc. | Jul 27, 2026 | 5,667 | Financial |
| Texas Capital | May 28, 2026 | 5,134 | PII / Identity |
| Columbia Pacific Advisors, LLC | Jun 12, 2026 | 1,585 | Healthcare / Medical |
| Gay & Lesbian Community Services Center of Orange County Inc | Jun 5, 2026 | 1,249 | Financial |
Source: Washington State Attorney General - Data Breach Notifications, industry-filtered. Data current through Aug 10, 2026.
Sources
State AG breach portals
Notable Washington Financial Institutions
| Institution | Washingtonians Affected | Date Published |
|---|---|---|
| Heritage Bank | 168,505 | Apr 23, 2026 |
| Alaska Air Group Federal Credit Union | 5,092 | Apr 17, 2026 |
| Hightower Holding, LLC | 7,528 | Mar 23, 2026 |
| Mercer Advisors Inc. | 7,470 | Mar 31, 2026 |
| EP Wealth Advisors, LLC | 2,313 | Mar 21, 2026 |
| Plaza Home Mortgage Inc. | 9,598 | Jun 5, 2026 |
California AG List (No Affected Counts)
California’s public breach list does not include resident-affected totals. Financial-sector entries in 2026 include Figure Technology Solutions (on behalf of Figure Lending and related entities) and insurance marketing firms. Monitor the California AG breach list for newly listed institutions.
Compliance Context
GLBA and the FTC Safeguards Rule require documented safeguards for customer nonpublic personal information. Weak email authentication enables impersonation, phishing, and fraudulent transfer requests — common precursors to breach notifications.
Check your institution’s posture at audit.emailmenow.com/?industry=financial-advisors.
Recommendations
- Enforce DMARC, strict SPF, and DKIM signing.
- Require MFA on email, wire-transfer, and core banking systems.
- Maintain a documented safeguards program with recurring security awareness training.
Related trackers
- Texas OAG YTD dashboard
- Healthcare AG breach tracker
- Government & education tracker
- Law firm breach tracker
- Hospitality & retail tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA August roundup
- TX August roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP August roundup
- Breach data week (August)
- HHS OCR July roundup
- SEC 8-K July roundup
- Monitoring guide
- All trackers