News
Page 4 of 29 — 853 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.
Have I Been Pwned added 1 breach on August 13, 2026, exposing 1,596,490 accounts globally. RingCentral led the batch with 1,596,490 accounts.
Read Update
Multi-source breach data week of August 9, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +12 (370 → 382). 10 companies/entities from source roundups.
Read Update
Have I Been Pwned added 1 breach on August 9, 2026, exposing 218,395 accounts globally. Alcon led the batch with 218,395 accounts.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed August 7, 2026. Alto Ingredients, Inc. is among the filers.
Read Update
Texas OAG published 6 new data security breach reports on August 7, 2026, affecting 6,806 Texans. RUS Industrial, LLC led the batch with 4,343 affected.
Read Update
California's data breach list added 3 notices on August 5, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Complaints allege a Dec 2025 Call-on-Doc breach with ~1.14M patient records sold on a dark-web forum. In Re 3:26-cv-00200 (N.D. Tex). Org notice not found. Audit: callondoc.com 48%.
Read Update
Marquis Software Solutions (Plano) reported an Aug 14, 2025 ransomware incident affecting 354,289 Texans via bank/CU customer data. E.D. Tex In Re 4:25-cv-01277. Audit: gomarquis.com 61%.
Read Update
Parexel International notified employees after an Oct 4, 2025 Oracle OCI E-Business Suite zero-day. Texas OAG lists 1,203 Texans. Neville v. Parexel consolidated into W.D. Tex Oracle MDL. Audit: parexel.com 54%.
Read Update
Complaints allege The Gentlemen hit Houston PsychPlus in April 2026 and exfiltrated patient PII/PHI. Lead docket Dickerson 4:26-cv-03068. No org/OCR notice found. Audit: psychplus.com 56%.
Read Update
Houston medical biller Resource Corporation of America confirmed Dec 2025 unauthorized access and filed with HHS OCR (501 individuals — often a placeholder). Audit: resource-corp.com 47%.
Read Update
ShinyHunters released ZenBusiness CRM data after a March 2026 extortion claim. HIBP lists 5,118,184 accounts. W.D. Tex In Re 1:26-cv-00812. Audit: zenbusiness.com 66% (ideal 100%).
Read Update
Earthbound Holding LLC (Earthbound Trading) reported 1,866 Texans affected after a Dec 2025 network incident exposing employee SSNs. N.D. Tex In Re litigation; audits score earthboundtrading.com at 73%.
Read Update
CHCP (Empowerment Schools / Texas Medical Careers) reported 68,927 Texans affected after an Aug 2025 network intrusion. S.D. Tex lawsuits and audits score chcp.edu at 60% with 15% transport.
Read Update
Gulshan Management Services reported 128,652 Texans affected after a Sept 2025 phishing-led Qilin ransomware incident. S.D. Tex In Re litigation and audits score gulshanenterprises.com at 43%.
Read Update
IBM/Ponemon Cost of a Data Breach Report 2026: global average $4.99M (+12%), US $11.5M; phishing still the top vector; AI-driven attacks +56% with deepfakes leading. Domain audits (ideal 100%): hhs.gov 71%; ibm.com 70%; frostbank.com 68% — none at 100%.
Read Update
Master Mobilelink / Mobily (Mobilelink) reported 12,201 Texans affected after a late-2025 incident. Consolidated S.D. Tex suits under 4:26-cv-02565; audits score mobilelinkusa.com at 84% with 15% transport.
Read Update
CourtListener Batch A Texas data-breach defendants ranked by domain audit (ideal 100%): Mobilelink 84%, Earthbound 73%, CHCP 60%, Gulshan 43%. All show 15% transport; lookalikes and MFA gaps called out.
Read Update
Multi-source breach data week of August 2, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +18 (352 → 370). 11 companies/entities from source roundups.
Read Update
ExfilSquad posted ~14 high-profile victims on July 26, 2026 — including Microsoft (~8M), Zenith Bank (~90M), and City of Houston (~6M). Researchers call evidence thin. Domain audits (ideal 100%): none at 100%; flyfrontier.com 74%; dcps.dc.gov 30%.
Read Update
Attackers abuse Google recovery-contact requests so phishing arrives from Google’s own servers (SPF/DKIM/DMARC pass). Do not click — verify at myaccount.google.com. Prefer passkeys, YubiKey, and Google Authenticator over SMS. Audits (100% ideal): accounts.google.com 58%, google.com 52%.
Read Update
Houston City College appears on Have I Been Pwned with ~832k student and alumni accounts after a June 2026 ShinyHunters pay-or-leak campaign. Audits score hccs.edu at 68% with 15% transport; MFA FAQ allows only Microsoft Authenticator or SMS — not Google Authenticator or YubiKey.
Read Update
AiLock claimed Dallas Regional Chamber; DragonForce listed Tulsa; Cuero warned of fake-CAPTCHA malware. Domain audits (ideal 100%): houston.org 70%; dallaschamber.org and tulsachamber.com 50%; okcchamber.com 32% — none at 100%. No portal advertises YubiKey or Google Authenticator.
Read Update
Have I Been Pwned added 1 breach on August 1, 2026, exposing 865,336 accounts globally. SplitVPN led the batch with 865,336 accounts.
Read Update
Living MFA directory: YubiKey/FIDO, open TOTP, and passkeys — Banks, Credit Unions, Investment Firms, Travel, Healthcare, Social, and Consumer Finance. Domain audits ideal 100%.
Read Update
Public MFA docs for Chase, Bank of America, Wells Fargo, U.S. Bank, Capital One, and Citi show phone SMS codes still dominate. None advertise Google Authenticator / Proton Pass TOTP; Bank of America is the clear FIDO security-key standout. Domain audits (ideal 100%): chase.com 79%; citi.com 50% — none at 100%.
Read Update
Public MFA docs for Frost, Comerica, Southside, Broadway, TRB, Prosperity, Texas Capital, and Independent Financial show SMS / voice codes still dominate. None advertise Google Authenticator / Proton Pass TOTP or consumer YubiKey. Domain audits (ideal 100%): texascapitalbank.com 84%; comerica.com 37% — none at 100%.
Read Update
HHS OCR listed 4 large HIPAA breach submissions dated July 31, 2026, affecting 6,166 individuals nationally. Monongalia County General Hospital Company led the batch with 2,173 individuals.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed July 31, 2026. AMGEN INC is among the filers.
Read Update
Texas OAG published 6 new data security breach reports on July 31, 2026, affecting 9,787 Texans. SM Energy Company led the batch with 3,851 affected.
Read Update