Data Privacy Investigation

Texas HHSC Data Breach Investigation

Texas Health and Human Services Commission · Unverified November 2026 claim

Hall Attorneys is investigating an unverified extortion claim naming the Texas Health and Human Services Commission, also known as Texas HHSC. We are seeking information from benefits applicants, recipients, and authorized representatives with related privacy concerns. Our review concerns possible exposure, safeguards, notices, and potential legal options; the new allegation does not establish a confirmed breach.

What is the new allegation?

RansomLook’s public index records November 9, 2026 BYOD entries naming Texas HHSC. The indexed actor claim alleges access to information about approximately 2 million Texans, including Medicaid, banking, SNAP, TANF, and disaster-assistance information. These are unverified assertions, not confirmed findings about exposed records or people.

As of November 9, 2026, we have not located official confirmation of this new allegation in the sources reviewed. We have not independently established unauthorized access, data theft, the affected systems, or an affected-person count. The listing date does not establish when any intrusion occurred.

The index uses both Texas HHSC and HHSC Texas for substantially similar claims. Those entries should not be added together as separate incidents or victim totals. We are reviewing public notices and information supplied by people with relevant concerns.

How does this differ from HHSC’s earlier privacy breach?

HHSC’s April 30, 2025 announcement described a previously disclosed employee-misconduct privacy incident involving at least 94,000 potentially affected individuals. It identified possible improper access between June 2021 and January 2025 and said nine employees had been terminated. Information involved differed by person.

That earlier disclosure does not verify BYOD’s November 2026 claim or establish that the incidents share a cause, records, or access period. A person notified about the older incident is not automatically affected by a new incident. Please preserve the date and wording of any notice so we can assess the correct event.

The earlier notice described monitoring and other assistance for that incident. We have not established that those offers remain available or apply to the new allegation. Check current eligibility and instructions directly with HHSC.

Who should contact Hall Attorneys?

We would like to hear from people who applied for or received HHSC-administered benefits and have an incident-related concern, as well as authorized representatives of household members. Programs people may recognize include Medicaid, SNAP food benefits, TANF cash assistance, and the Lone Star Card. You may contact us if you:

  • Received a security or privacy notice naming HHSC or information supplied in a benefits application.
  • Observed unfamiliar benefits, banking, or account activity and have information suggesting a connection to HHSC records.
  • Received suspicious messages using nonpublic details about an application, benefits, or household.
  • Spent time or money responding to a potentially related privacy or account-security concern.

An application, benefits enrollment, old notice, or suspicious message alone does not establish exposure in this new allegation. We will review each inquiry on its facts and applicable law. Contacting us does not establish a legal claim, class membership, or an entitlement to compensation.

How can you check suspicious activity?

Review benefits activity and relevant bank, health-care, and insurance statements through channels you independently know are genuine. Open the official Your Texas Benefits website or app yourself rather than following an unexpected link. Verify reporting instructions with HHSC or the relevant provider.

An accurate name or benefits detail does not authenticate a message. Do not give an unsolicited caller your account password, Lone Star Card PIN, verification code, Social Security number, or payment information. Use independently verified contact information to check a request.

A request for legal review does not report benefits fraud, replace benefits, change eligibility, or submit an agency complaint. Do not delay contacting the appropriate provider or agency while awaiting a case review. This investigation does not establish that HHSC services are unavailable.

What records should you preserve?

Keep original notices, envelopes, suspicious messages, relevant account alerts, support correspondence, and records of response expenses. Note when you applied for benefits, when you received a notice, and when you first observed a problem. Preserve records of any credits, refunds, or replacement benefits so losses can be assessed without duplicate recovery.

Start with a general description. Do not send Social Security numbers, benefits or Medicaid identifiers, Lone Star Card numbers or PINs, passwords, medical records, complete bank details, or other people’s personal information in an initial inquiry. Keep only records you are authorized to access; do not seek or share allegedly stolen data.

Contact Hall Attorneys about Texas HHSC

Provide your name, state of residence, a safe way to reach you, and your relationship to HHSC. You may identify the benefits program in general terms without providing an account number, medical history, immigration information, or a detailed household application. Tell us whether you are contacting us for yourself or as an authorized representative.

Briefly describe any notice, suspicious activity, relevant dates, and response expenses. Let us know whether it is safe to leave a voicemail. If additional documents are needed, we can discuss an appropriate way to provide them.

Nicholas Hall

Email: nhall@hallattorneys.com

Phone: 713-428-8967

Request a Case Review

Attorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with Texas HHSC or any government benefits program. This page describes an investigation into an unverified allegation, not a filed lawsuit by Hall Attorneys concerning that allegation. Individual exposure, legal responsibility, and compensation have not been determined. It provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.