US-TX — Hacking/IT Incident
Reported with a business associate involved (HHS portal)
Timeline
- July 2024Press coverage Press
press report (press_reported): identified suspicious activity on its systems in mid-July
source - September 2024Press coverage Press
press report (acknowledged): confirmed in early September that hackers stole patient PII and PHI
source - September 16, 2024Press coverage Press
press report (individuals_notified): On September 16, the company notified HHS that 126,196 individuals were affected
source - July 18, 2026
- July 20, 2026Press coverage Press
press report (press_reported): The incident was identified on July 20, 2026
source - August 2026Press coverage Press
press report (press_reported): added AngMar Management Services to its dark web data leak site in August 2026
source - September 8, 2026Press coverage Press
press report (press_reported): The review of the affected data was completed on September 8, 2026
source - September 16, 2026Reported to regulator Regulator
HHS OCR breach portal listing: Hacking/IT Incident; Network Server
source
What a Texas notice means
Governed by Tex. Bus. & Com. Code §521.053. Notice to the Attorney General is required when a breach affects at least 250 Texas residents.
Note: the published count is a total, not limited to Texas residents.