- State
- TX
- Covered entity type
- Health Plan
- Individuals affected
- 3,392
- Business associate present
- No
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
The covered entity (CE), Texas Health and Human Services, reported that that an employee emailed the protected health information of 3,392 individuals to a personal email account. The PHI involved included names, addresses, Social Security numbers, telephone numbers, diagnoses/conditions, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided free credit monitoring and implemented additional technical safeguards.
Change history
- 9/23/2026Added to OCR's archive list
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.