The Texas Office of the Attorney General published 13 new data security breach reports on October 30, 2026, according to a fresh scrape of the Texas OAG Data Security Breach Reports portal. Combined, these reports cover 442,972 Texans.
The largest filing — Marathon Health — accounts for 234,534 affected Texans in this batch. See the live Texas OAG YTD dashboard for monthly charts.
October month-to-date now totals 99 published reports affecting 9,197,845 Texans through October 30, 2026.
Sector breakdown
- Government / education: 1 report, 323 Texans — led by Granbury ISD
- Healthcare / medical: 7 reports, 257,623 Texans — led by Marathon Health
- Financial: 3 reports, 142,314 Texans — led by Revolve Group, Inc.
- Other sectors: 2 reports, 42,712 Texans
Reports Published October 30, 2026
| Entity | Texans Affected | Consumer Notice | Date Published |
|---|---|---|---|
| Marathon Health | 234,534 | Yes | 10/30/2026 |
| Revolve Group, Inc. | 127,200 | Yes | 10/30/2026 |
| Hippo Analytics Inc. | 38,518 | No | 10/30/2026 |
| HCA Healthcare, Inc. | 15,096 | Yes | 10/30/2026 |
| The Krum Public Library | 14,828 | Yes | 10/30/2026 |
| Troutman Pepper Locke LLP | 4,194 | Yes | 10/30/2026 |
| Del Monte Foods Corporation II Inc. | 3,475 | Yes | 10/30/2026 |
| Blossom BH Opco Inc. | 2,014 | Yes | 10/30/2026 |
| Trimera Health | 1,343 | No | 10/30/2026 |
| Metro Tulsa Foot & Ankle Specialist | 909 | Yes | 10/30/2026 |
| Granbury ISD | 323 | Yes | 10/30/2026 |
| The Vant Group, Inc. | 286 | No | 10/30/2026 |
| American Campus Communities LLC | 252 | Yes | 10/30/2026 |
The OAG notes that report details — including the number of affected Texans and whether consumer notice was provided — may change after a report is first listed.
Independent Cybersecurity Audits
EmailMeNow domain audits on October 30, 2026 scored 10 filer domains in this batch.
8 of 10 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
HCA Healthcare, Inc. (gehealthcare.com) leads at 72% overall; Blossom BH Opco Inc. (blossom.com) scores 35%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Marathon Health | marathonhealth.com.au | 49% | 50% | 15% | 45% | Below Average |
| Revolve Group, Inc. | revolve.com | 58% | 75% | 15% | 40% | Average |
| Hippo Analytics Inc. | hippoanalytics.com | 47% | 50% | 15% | 37% | Below Average |
| HCA Healthcare, Inc. | airtificial.com | 68% | 95% | 50% | 42% | Above Average |
| HCA Healthcare, Inc. | hcahealthcare.com | 45% | 45% | 45% | 45% | Below Average |
| HCA Healthcare, Inc. | gehealthcare.com | 72% | 75% | 15% | 87% | Good |
| The Krum Public Library | krumlibrary.org | 48% | 50% | 15% | 40% | Below Average |
| Troutman Pepper Locke LLP | troutman.com | 69% | 65% | 15% | 92% | Above Average |
| Del Monte Foods Corporation II Inc. | delmontefoods.com | 64% | 90% | 15% | 40% | Above Average |
| Blossom BH Opco Inc. | blossom.com | 35% | 0% | 15% | 65% | Weak |
Audit links: marathonhealth.com.au · revolve.com · hippoanalytics.com · airtificial.com · hcahealthcare.com · gehealthcare.com · krumlibrary.org · troutman.com · delmontefoods.com · blossom.com
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA October roundup
- TX October roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP October roundup
- Breach data week (November)
- HHS OCR October roundup
- SEC 8-K October roundup
- Monitoring guide