Public-sector and education organizations hold payroll data, student records, benefits information, and credentials for large populations. State AG breach portals show cities, counties, school districts, and universities filing 2026 notices in Texas, Washington, and California — often after vendor or benefits-administration incidents.
Texas Government & Education Breaches (2026)
Interactive Tracker
Texas Government & Education Breaches: 2026 OAG Reports
Texans affected by 2026 breach notices from cities, counties, schools, and universities, by month
Show largest 2026 government and education breach reports
| Entity | Published | Texans affected | Sector |
|---|---|---|---|
| Texas Parks and Wildlife | Jun 26, 2026 | 3,087,721 | Government / Education |
| Texas Tech University Health Sciences Center | Apr 27, 2026 | 738,506 | Government / Education |
| Columbia University | May 20, 2026 | 161,544 | Government / Education |
| Denton County MHMR Center, My Health, My Resources | Jan 5, 2026 | 56,872 | Government / Education |
| Alamo Heights Independent School District | Jun 22, 2026 | 26,629 | Government / Education |
Source: Texas Attorney General - Data Security Breach Reports, industry-filtered. Data current through Oct 2, 2026.
Sources
State AG breach portals
State AG reporting & notices
Federal registries
Notable Texas Public-Sector Notices
| Organization | Texans Affected | Date Published |
|---|---|---|
| Texas Parks and Wildlife | 3,087,721 | Jun 26, 2026 |
| Texas Tech University Health Sciences Center | 738,506 | Apr 27, 2026 |
| Columbia University | 161,544 | May 20, 2026 |
| Denton County MHMR Center, My Health, My Resources | 56,872 | Jan 5, 2026 |
| Alamo Heights Independent School District | 26,629 | Jun 22, 2026 |
Newly listed in Texas (last 3 weeks)
| Organization | Texans Affected | Date Published |
|---|---|---|
| City of McMinnville | 263 | Oct 2, 2026 |
| Borger Independent School District | 4,232 | Sep 29, 2026 |
| Mitchell County Hospital District | 22,133 | Sep 21, 2026 |
| The City of Jacksonville, TX | 250 | Sep 21, 2026 |
| LeTourneau University | 1,072 | Sep 17, 2026 |
For Texas school districts specifically, see our Texas ISD ransomware tracker.
Washington Government & Education Breaches (2026)
Interactive Tracker
Washington Government & Education Breaches: 2026 AG Reports
Washingtonians affected by 2026 breach notices from cities, counties, schools, and universities, by month
Show largest 2026 Washington government and education breach reports
| Entity | Published | Washingtonians affected | Sector |
|---|---|---|---|
| Aesto, LLC (Grant County Public Hospital District #2) | Aug 4, 2026 | 37,253 | Government / Education |
| Kootenai County, Idaho | Jul 22, 2026 | 746 | Government / Education |
| Southern Illinois University | Aug 20, 2026 | 552 | Government / Education |
| Virta Health Corp. and Virta Medical, PC (Department of Health And Human Services) | Sep 3, 2026 | 134 | Government / Education |
| Chelan County, WA | Aug 11, 2026 | 0 | Government / Education |
Source: Washington State Attorney General - Data Breach Notifications, industry-filtered. Data current through Sep 3, 2026.
Sources
State AG breach portals
Notable Washington Public-Sector Notices
| Organization | Washingtonians Affected | Date Published |
|---|---|---|
| Aesto, LLC (Grant County Public Hospital District #2) | 37,253 | Aug 4, 2026 |
| Kootenai County, Idaho | 746 | Jul 22, 2026 |
| Southern Illinois University | 552 | Aug 20, 2026 |
| Virta Health Corp. and Virta Medical, PC (Department of Health And Human Services) | 134 | Sep 3, 2026 |
| Chelan County, WA | 0 | Aug 11, 2026 |
The City of Bellevue notice through Navia Benefit Solutions is the largest Washington AG filing so far in 2026 — a reminder that municipal benefits vendors can drive public-sector breach counts.
California AG List (No Affected Counts)
California publishes incident names without resident totals. Recent 2026 government and education entries include:
- Los Angeles County Department of Public Social Services — Jun 12, 2026
- Bellflower Unified School District — Jun 12, 2026
- Sacramento County — May 22, 2026
- City of Port Hueneme — May 15, 2026
- Lansing Community College — Jun 5, 2026
Why This Matters
Public-sector organizations face HB 3834 training mandates in Texas, FERPA obligations for schools, and increasing ransomware pressure on under-resourced IT teams. Vendor breaches — especially benefits and payroll administrators — can expose employee and student data across state lines.
Recommendations
- Require MFA on email and administrative systems.
- Enforce DMARC, SPF, and DKIM on official domains.
- Document vendor access and incident response contacts.
- Test backup restoration and phishing reporting workflows.
Related trackers
- Texas OAG YTD dashboard
- Healthcare AG breach tracker
- Financial services tracker
- TX Parks & Wildlife breach
- Law firm breach tracker
- Hospitality & retail tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA September roundup
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR September roundup
- SEC 8-K September roundup
- Monitoring guide
- All trackers