The Texas Office of the Attorney General published 9 new data security breach reports on July 23, 2026, according to a fresh scrape of the Texas OAG Data Security Breach Reports portal. Combined, these reports cover 446,735 Texans.
The largest filing — Central Texas MHMR dba Center for Life Resource — accounts for 10,031 affected Texans in this batch. See the live Texas OAG YTD dashboard for monthly charts.
July month-to-date now totals 50 published reports affecting 7,245,329 Texans through July 23, 2026.
Sector breakdown
- Healthcare / medical: 5 reports, 436,258 Texans — led by Unlimited Technology Systems, LLC
- Government / education: 1 report, 1,494 Texans — led by Texas Department of Criminal Justice
- Other sectors: 3 reports, 8,983 Texans
Reports Published July 23, 2026
| Entity | Texans Affected | Consumer Notice | Date Published |
|---|---|---|---|
| Unlimited Technology Systems, LLC | 277,364 | Yes | 07/23/2026 |
| Xsolis, Inc. | 139,424 | Yes | 07/23/2026 |
| Central Texas MHMR dba Center for Life Resource | 10,031 | Yes | 07/23/2026 |
| The Devereux Foundation | 5,341 | Yes | 07/23/2026 |
| Safetyfirst Systems, LLC | 4,504 | Yes | 07/23/2026 |
| McEwen and Associates, Inc. | 4,098 | Yes | 07/23/2026 |
| First Advantage Corporation | 3,608 | No | 07/23/2026 |
| Texas Department of Criminal Justice | 1,494 | No | 07/23/2026 |
| United States Tennis Association Texas | 871 | Yes | 07/23/2026 |
The OAG notes that report details — including the number of affected Texans and whether consumer notice was provided — may change after a report is first listed.
Independent Cybersecurity Audits
EmailMeNow domain audits on July 23, 2026 scored 9 filer domains in this batch.
8 of 9 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Central Texas MHMR dba Center for Life Resource (cflr.us) leads at 78% overall; United States Tennis Association Texas (ustatexas.com) scores 28%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Unlimited Technology Systems, LLC | unlimitedtechnology.com | 37% | 10% | 15% | 40% | Weak |
| Xsolis, Inc. | xsolis.com | 52% | 50% | 15% | 37% | Average |
| Central Texas MHMR dba Center for Life Resource | cflr.us | 78% | 75% | 15% | 90% | Good |
| The Devereux Foundation | devereux.org | 70% | 90% | 15% | 43% | Good |
| Safetyfirst Systems, LLC | safetyfirst.com | 42% | 25% | 15% | 37% | Below Average |
| McEwen and Associates, Inc. | mcewenassociates.com | 33% | 0% | 15% | 40% | Weak |
| First Advantage Corporation | fadv.com | 66% | 85% | 15% | 37% | Above Average |
| Texas Department of Criminal Justice | tdcj.texas.gov | 53% | 50% | 45% | 37% | Average |
| United States Tennis Association Texas | ustatexas.com | 28% | 0% | 15% | 37% | Weakest |
Audit links: unlimitedtechnology.com · xsolis.com · cflr.us · devereux.org · safetyfirst.com · mcewenassociates.com · fadv.com · tdcj.texas.gov · ustatexas.com
Website stack note
- First Advantage Corporation (
fadv.com): WordPress behind current (running 3.7.1; latest 7.0.4); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly.
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA August roundup
- TX August roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP August roundup
- Breach data week (August)
- HHS OCR July roundup
- SEC 8-K July roundup
- Monitoring guide