The Texas Office of the Attorney General published 8 new data security breach reports on September 11, 2026, according to a fresh scrape of the Texas OAG Data Security Breach Reports portal. Combined, these reports cover 93,797 Texans.
The largest filing — Quatrro Business Support Services, Inc. (“Quatrro”) — accounts for 51,717 affected Texans in this batch. See the live Texas OAG YTD dashboard for monthly charts.
September month-to-date now totals 35 published reports affecting 317,456 Texans through September 11, 2026.
Sector breakdown
- Healthcare / medical: 5 reports, 40,243 Texans — led by Costa Solutions, LLC
- Financial: 1 report, 51,717 Texans — led by Quatrro Business Support Services, Inc. (“Quatrro”)
- Other sectors: 2 reports, 1,837 Texans
Reports Published September 11, 2026
| Entity | Texans Affected | Consumer Notice | Date Published |
|---|---|---|---|
| Quatrro Business Support Services, Inc. (“Quatrro”) | 51,717 | Yes | 09/11/2026 |
| Costa Solutions, LLC | 19,758 | Yes | 09/11/2026 |
| Vernon & Waldrep OB-Gyn Associates | 16,876 | Yes | 09/11/2026 |
| Azle Cube Smiles PLLC | 2,940 | Yes | 09/11/2026 |
| Greenberg Traurig, LLP (“GT”) | 1,197 | Yes | 09/11/2026 |
| Heart of Texas Workforce Development Board, Inc. | 640 | Yes | 09/11/2026 |
| Cardinal Services LLC | 419 | Yes | 09/11/2026 |
| North Dallas Shared Ministries, dba Now-Forward | 250 | No | 09/11/2026 |
The OAG notes that report details — including the number of affected Texans and whether consumer notice was provided — may change after a report is first listed.
Independent Cybersecurity Audits
EmailMeNow domain audits on September 11, 2026 scored 8 filer domains in this batch.
7 of 8 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Vernon & Waldrep OB-Gyn Associates (mckesson.com) leads at 64% overall; Heart of Texas Workforce Development Board, Inc. (heart.com) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Quatrro Business Support Services, Inc. (“Quatrro”) | quatrro.com | 47% | 50% | 15% | 37% | Below Average |
| Costa Solutions, LLC | costasolutions.com | 34% | 0% | 15% | 62% | Weak |
| Vernon & Waldrep OB-Gyn Associates | mckesson.com | 64% | 90% | 15% | 42% | Above Average |
| Azle Cube Smiles PLLC | azle.com | 43% | 50% | 15% | 37% | Below Average |
| Greenberg Traurig, LLP (“GT”) | greenbergtraurig.com | 49% | 65% | 15% | 37% | Below Average |
| Heart of Texas Workforce Development Board, Inc. | heart.com | 23% | 0% | 15% | 37% | Weakest |
| Cardinal Services LLC | cardinalsvc.com | 50% | 50% | 70% | 37% | Average |
| North Dallas Shared Ministries, dba Now-Forward | dallas.com | 27% | 0% | 15% | 37% | Weakest |
Audit links: quatrro.com · costasolutions.com · mckesson.com · azle.com · greenbergtraurig.com · heart.com · cardinalsvc.com · dallas.com
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR September roundup
- SEC 8-K September roundup
- Monitoring guide