Saber Healthcare Inc. · Breach Census

Confirmed incident

Filed in TX, DE and VT

The same incident was filed separately with 3 jurisdictions within a few days of each other (TX, DE and VT) — shown here as one incident.

July 27, 2026
Press coverage Press
press report (press_reported): The incident was identified on July 27, 2026
^source
August 19, 2026
Press coverage Press
press report (individuals_notified): On August 19, 2026, the review of the server was completed, and up-to-date address information was obtained to allow notification letters to be mailed.
^source
August 28, 2026
Press coverage Press
press report (press_reported): On August 28, 2026, Buchalter discovered that limited data was accessed by an unauthorized third party.
^source
September 21, 2026
Press coverage Press
press report (individuals_notified): on September 21, 2026, contact information was obtained to allow notification letters to be mailed.
^source
September 25, 2026
Reported to regulator Regulator
DE AG breach notification: 3,697 Delaware residents affected
^source
September 26, 2026
Reported to regulator Regulator
VT AG breach notification: 25 Vermont residents affected
^source
September 29, 2026
Reported to regulator Regulator
TX AG breach notification: 269 Texas residents affected
^source

What a Texas notice means

Governed by Tex. Bus. & Com. Code §521.053. Notice to the Attorney General is required when a breach affects at least 250 Texas residents.

Note: the published count is a total, not limited to Texas residents.

What a Delaware notice means

Governed by 6 Del. C. §12B-102. Notice to the Attorney General is required when a breach affects more than 500 Delaware residents.

Note: the count is Delaware residents only, not a total.

What a Vermont notice means

Governed by 9 V.S.A. §2435. Notification to the Attorney General is required.

Note: the count is Vermont residents.