The Texas Office of the Attorney General published 11 new data security breach reports on September 25, 2026, according to a fresh scrape of the Texas OAG Data Security Breach Reports portal. Combined, these reports cover 94,166 Texans.
The largest filing — AngMar Management Services — accounts for 35,916 affected Texans in this batch. See the live Texas OAG YTD dashboard for monthly charts.
September month-to-date now totals 75 published reports affecting 970,634 Texans through September 25, 2026.
Sector breakdown
- Credit unions: 1 report, 1,126 Texans — led by Fairwinds Credit Union
- Healthcare / medical: 6 reports, 72,350 Texans — led by AngMar Management Services
- Financial: 3 reports, 17,465 Texans — led by OneMain Financial Group, LLC
- Other sectors: 1 report, 3,225 Texans
Reports Published September 25, 2026
| Entity | Texans Affected | Consumer Notice | Date Published |
|---|---|---|---|
| AngMar Management Services | 35,916 | Yes | 09/25/2026 |
| Ridgeway Pharmacy Ltd | 33,485 | Yes | 09/25/2026 |
| OneMain Financial Group, LLC | 15,472 | Yes | 09/25/2026 |
| Corpay, Inc. | 3,225 | Yes | 09/25/2026 |
| CITGO Petroleum Corporation | 1,907 | Yes | 09/25/2026 |
| Fairwinds Credit Union | 1,126 | Yes | 09/25/2026 |
| Gallagher Transport International Inc. | 1,097 | Yes | 09/25/2026 |
| Structural and Steel Products | 896 | Yes | 09/25/2026 |
| HarbisonWalker International, Inc. | 456 | Yes | 09/25/2026 |
| Fun For Less Tours, Inc. | 328 | Yes | 09/25/2026 |
| United Underwriters | 258 | No | 09/25/2026 |
The OAG notes that report details — including the number of affected Texans and whether consumer notice was provided — may change after a report is first listed.
Independent Cybersecurity Audits
EmailMeNow domain audits on September 25, 2026 scored 10 filer domains in this batch.
9 of 10 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Fairwinds Credit Union (fairwinds.org) leads at 79% overall; Ridgeway Pharmacy Ltd (ridgeway.pharmacy) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| AngMar Management Services | angmar.com | 27% | 0% | 15% | 37% | Weakest |
| Ridgeway Pharmacy Ltd | ridgeway.pharmacy | 23% | 0% | 15% | 37% | Weakest |
| OneMain Financial Group, LLC | onemainfinancial.com | 64% | 90% | 15% | 42% | Above Average |
| Corpay, Inc. | corpayone.com | 75% | 75% | 45% | 92% | Good |
| CITGO Petroleum Corporation | citgo.com | 69% | 65% | 15% | 90% | Above Average |
| Fairwinds Credit Union | fairwinds.org | 79% | 90% | 15% | 90% | Good |
| Gallagher Transport International Inc. | gallaghertransport.com | 48% | 50% | 15% | 40% | Below Average |
| Structural and Steel Products | s-steel.com | 48% | 50% | 15% | 40% | Below Average |
| HarbisonWalker International, Inc. | harbisonwalker.com | 32% | 10% | 15% | 40% | Weak |
| Fun For Less Tours, Inc. | funforlesstours.com | 27% | 0% | 15% | 37% | Weakest |
Audit links: angmar.com · ridgeway.pharmacy · onemainfinancial.com · corpayone.com · citgo.com · fairwinds.org · gallaghertransport.com · s-steel.com · harbisonwalker.com · funforlesstours.com
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR September roundup
- SEC 8-K September roundup
- Monitoring guide