Breach intelligence · TX
26 reported healthcare data breach incidents affecting 3.5M individuals. Sourced from 7 federal and community intelligence feeds. Updated nightly.
26
Incidents reported
3.5M
Individuals affected
Hacking
Top attack vector
Stable
6-month trend
Recent incidents
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
<projected> Projected from news reports · Not yet confirmed by HHS. Blue Fish Pediatrics notified 41,485 Texans about a data breach that occurred between July 11 and July 17, 2025, exposing personal and protected health information.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
<projected> Projected from news reports · Not yet confirmed by HHS. The Trump administration inadvertently exposed the Social Security numbers of health care providers in a database powering a new Medicare portal.
Reported to HHS OCR.
Reported to HHS OCR.
Reported to HHS OCR.
Most affected entities
#1
2
incidents
104K
individuals
#2
2
incidents
2.8M
individuals
#3
1
incidents
2K
individuals
#4
1
incidents
25K
individuals
#5
1
incidents
10K
individuals
Attack vectors
Breakdown of breach types reported across 26 incidents in Texas. Understanding which vectors dominate helps practices prioritize their security controls.
Texas compliance requirements
Beyond federal HIPAA requirements, Texas has its own breach notification law that may impose additional obligations on healthcare practices operating in the state.
Tex. Bus. & Com. Code § 521.053
Notification deadline
60 days
Matches HIPAA's 60-day notification requirement.
Attorney General notification
Required (250+ individuals)
Comprehensive consumer data privacy law with broad applicability. Includes requirements for data protection assessments, opt-out mechanisms, and data minimization.
Texas has additional healthcare-specific privacy protections that exceed HIPAA in certain areas, including restrictions on re-disclosure of medical records.
The Texas AG has been among the most aggressive in pursuing breach notification violations, with settlements in the millions.
This is a general reference based on current Texas law. Consult legal counsel for state-specific compliance obligations. Source: Tex. Bus. & Com. Code § 521.053. Verified April 2026.
Protect your Texas practice
Patient Protect gives independent practices real-time compliance monitoring, breach prevention, and secure workflows — so your practice stays out of this database. Starting at $39/month.
14-day free trial · No charge until trial ends
FAQ
Patient Protect tracks 26 reported healthcare data breach incidents in Texas, affecting approximately 3.5M individuals. Data is sourced from HHS OCR, State Attorney General offices, FTC enforcement, and community intelligence — updated nightly.
The most frequently reported breach vector in Texas is Hacking/IT Incident, accounting for 23 of 26 incidents. Unauthorized Access/Disclosure is the second most common with 3 incidents.
Independent healthcare practices are the fastest-growing target for healthcare cyberattacks nationwide — attacks on small providers have increased 6x since 2021. Texas practices face the same threat landscape with fewer resources to defend against it. Patient Protect provides breach prevention specifically for independent practices starting at $39/month.
Texas requires breach notification within 60 days, and requires notification to the Attorney General when 250 or more individuals are affected. These requirements apply in addition to federal HIPAA's 60-day notification deadline. Reference: Tex. Bus. & Com. Code § 521.053.
Explore the full breach intelligence dashboard with 12 analytical views, risk forecasting, and attack chain visualization.
Open full dashboardData Disclaimer: This data is aggregated from publicly available sources including the HHS OCR Breach Portal, FTC, state AG databases, CISA advisories, and curated reporting. Certain records are algorithmically modeled from news sources and labeled accordingly. Data is provided “as-is” for informational purposes only. Inclusion of any entity does not imply wrongdoing. Users must independently verify information before relying on it. See Terms of Use.
Editorial coverage · From our partner publication
Editorial analysis of the breaches and enforcement actions reshaping Texas's threat landscape. From the Patient Protect publication.
Jul 13, 2026 · Cybersecurity
The U.S. Treasury sanctioned a VPN provider and its Ukrainian administrator for supplying ransomware groups with anonymization tools used in attacks on hospitals and other critical infrastructure.
Read on HIPAA Pulse
Jul 13, 2026 · Breach
A laboratory services provider disclosed a data breach affecting roughly 540,000 individuals after the WorldLeaks extortion group claimed to have stolen 720 GB of data from its systems.
Read on HIPAA Pulse
Jul 11, 2026 · Cybersecurity
A ransomware negotiator hired to protect breach victims was sentenced to 70 months in federal prison after secretly feeding BlackCat ransomware operators inside information on their targets' defense strategies.
Read on HIPAA Pulse
Jul 10, 2026 · Cybersecurity
Cyberattacks targeting healthcare service providers and business associates more than doubled in the first half of 2026, outpacing the modest rise in direct attacks on hospitals and clinics.
Read on HIPAA Pulse
Jul 8, 2026 · Breach
A wave of class action lawsuits filed in state and federal courts targets large healthcare corporations accused of exposing or improperly sharing patients' protected health information and personally identifiable information.
Read on HIPAA Pulse
Jul 4, 2026 · Breach
AdaptHealth disclosed a social-engineering breach to the SEC that gave attackers access to patient management systems, document storage, an external EHR, and insurance billing credentials.
Read on HIPAA Pulse
HIPAA Pulse is the editorial publication of Patient Protect. PP’s HIPAA Response translates each story into operational guidance.
