The Texas Office of the Attorney General published 13 new data security breach reports on August 21, 2026, according to a fresh scrape of the Texas OAG Data Security Breach Reports portal. Combined, these reports cover 136,398 Texans.
The largest filing — Allstate — accounts for 377 affected Texans in this batch. See the live Texas OAG YTD dashboard for monthly charts.
August month-to-date now totals 58 published reports affecting 2,028,927 Texans through August 21, 2026.
Sector breakdown
- Healthcare / medical: 7 reports, 38,591 Texans — led by Williams Brothers Construction Co., Inc.
- Financial: 3 reports, 15,305 Texans — led by ASOS US Sales LLC
- Government / education: 2 reports, 2,364 Texans — led by Southern Illinois University
- Other sectors: 2 reports, 80,905 Texans
Reports Published August 21, 2026
| Entity | Texans Affected | Consumer Notice | Date Published |
|---|---|---|---|
| Wilmer Cutler Pickering Hale and Dorr LLP | 80,528 | Yes | 08/21/2026 |
| Williams Brothers Construction Co., Inc. | 21,537 | Yes | 08/21/2026 |
| ASOS US Sales LLC | 9,412 | No | 08/21/2026 |
| Community First Health Plans, Inc. | 7,133 | Yes | 08/21/2026 |
| Forrestall CPAs LLC | 3,725 | Yes | 08/21/2026 |
| Turner Construction Company | 3,683 | Yes | 08/21/2026 |
| HUT American Group LLC | 3,528 | Yes | 08/21/2026 |
| Ozark Interests, Inc. | 2,210 | No | 08/21/2026 |
| Southern Illinois University | 1,597 | Yes | 08/21/2026 |
| Cantex, Inc. | 1,568 | Yes | 08/21/2026 |
| Monmouth University | 767 | Yes | 08/21/2026 |
| Allstate | 377 | Yes | 08/21/2026 |
| United Language Group, LLC | 333 | Yes | 08/21/2026 |
The OAG notes that report details — including the number of affected Texans and whether consumer notice was provided — may change after a report is first listed.
Independent Cybersecurity Audits
EmailMeNow domain audits on August 21, 2026 scored 10 filer domains in this batch.
8 of 10 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Monmouth University (monmouth.edu) leads at 82% overall; Wilmer Cutler Pickering Hale and Dorr LLP (wilmer.com) scores 24%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Wilmer Cutler Pickering Hale and Dorr LLP | wilmer.com | 24% | 0% | 15% | 40% | Weakest |
| Williams Brothers Construction Co., Inc. | williamsbrothersconstruction.com | 59% | 90% | 15% | 37% | Average |
| ASOS US Sales LLC | asos.com | 62% | 85% | 15% | 40% | Above Average |
| Community First Health Plans, Inc. | communityfirsthealthplans.com | 41% | 35% | 15% | 37% | Below Average |
| Forrestall CPAs LLC | forrestallcpas.com | 39% | 25% | 50% | 37% | Weak |
| Turner Construction Company | alcastcompany.com | 57% | 75% | 15% | 39% | Average |
| Ozark Interests, Inc. | ozark.com | 31% | 10% | 15% | 37% | Weak |
| Southern Illinois University | southerncompany.com | 38% | 25% | 15% | 40% | Weak |
| Cantex, Inc. | cantexinc.com | 63% | 90% | 15% | 37% | Above Average |
| Monmouth University | monmouth.edu | 82% | 90% | 70% | 90% | Good |
Audit links: wilmer.com · williamsbrothersconstruction.com · asos.com · communityfirsthealthplans.com · forrestallcpas.com · alcastcompany.com · ozark.com · southerncompany.com · cantexinc.com · monmouth.edu
Website stack note
- Turner Construction Company (
alcastcompany.com): PHP outdated/unsupported (8.0.30 — no vendor security patches) - Community First Health Plans, Inc. (
communityfirsthealthplans.com): WordPress behind current (running 7.0.4; latest 7.1)
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker